Malicious PE Executable analysis – a7c223130a1b

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Detection

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Symbol obfuscation

Low

1 malicious · 5 files

EXEa7c223130a1bdbb4300a60fc8b10f3c1

Structure

BINResources

BIN.Net Resources

Name	Value
Module Name	Bpotkwxcn.exe
Full Name	Bpotkwxcn.exe
EntryPoint	System.Void Bpotkwxcn.Controllers.GroupedController::ControlEditableController()
Scope Name	Bpotkwxcn.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Bpotkwxcn
Assembly Version	1.0.7754.10754
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.6
Total Strings	754
Main Method	System.Void Bpotkwxcn.Controllers.GroupedController::ControlEditableController()
Main IL Instruction Count	32
Main IL	ldc.i4 1 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_0059: ldsfld Bpotkwxcn.Controllers.GroupedController/<>c Bpotkwxcn.Controllers.GroupedController/<>c::m_GroupedLogger ret <null> ldsfld System.Action`1<System.IO.MemoryStream> Bpotkwxcn.Controllers.GroupedController/<>c::_AttachedTag dup <null> brfalse IL_0039: pop br IL_006F: call System.Void Bpotkwxcn.Controllers.GroupedController::ControlTransferableController(System.Action`1<System.IO.MemoryStream>) pop <null> ldc.i4 0 ldsfld <Module>{df973447-2985-4edc-88d3-5e292cf4d240} <Module>{df973447-2985-4edc-88d3-5e292cf4d240}::m_f9a80fa2aa9a4cd0a7bfcaad712d07c9 ldfld System.Int32 <Module>{df973447-2985-4edc-88d3-5e292cf4d240}::m_1f9ad7e256ab4878b04bf5256b3bd400 brfalse IL_0012: switch(IL_0059,IL_0029,IL_0028) pop <null> ldc.i4 0 br IL_0012: switch(IL_0059,IL_0029,IL_0028) ldsfld Bpotkwxcn.Controllers.GroupedController/<>c Bpotkwxcn.Controllers.GroupedController/<>c::m_GroupedLogger ldftn System.Void Bpotkwxcn.Controllers.GroupedController/<>c::MoveStub(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Action`1<System.IO.MemoryStream> Bpotkwxcn.Controllers.GroupedController/<>c::_AttachedTag call System.Void Bpotkwxcn.Controllers.GroupedController::ControlTransferableController(System.Action`1<System.IO.MemoryStream>) ldc.i4 1 ldsfld <Module>{df973447-2985-4edc-88d3-5e292cf4d240} <Module>{df973447-2985-4edc-88d3-5e292cf4d240}::m_f9a80fa2aa9a4cd0a7bfcaad712d07c9 ldfld System.Int32 <Module>{df973447-2985-4edc-88d3-5e292cf4d240}::m_2238def2371c4d378a0e247a5c154360 brfalse IL_0012: switch(IL_0059,IL_0029,IL_0028) pop <null> ldc.i4 2 br IL_0012: switch(IL_0059,IL_0029,IL_0028)
Module Name	Bpotkwxcn.exe
Full Name	Bpotkwxcn.exe
EntryPoint	System.Void Bpotkwxcn.Controllers.GroupedController::ControlEditableController()
Scope Name	Bpotkwxcn.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Bpotkwxcn
Assembly Version	1.0.7754.10754
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.6
Total Strings	754
Main Method	System.Void Bpotkwxcn.Controllers.GroupedController::ControlEditableController()
Main IL Instruction Count	32
Main IL	ldc.i4 1 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_0059: ldsfld Bpotkwxcn.Controllers.GroupedController/<>c Bpotkwxcn.Controllers.GroupedController/<>c::m_GroupedLogger ret <null> ldsfld System.Action`1<System.IO.MemoryStream> Bpotkwxcn.Controllers.GroupedController/<>c::_AttachedTag dup <null> brfalse IL_0039: pop br IL_006F: call System.Void Bpotkwxcn.Controllers.GroupedController::ControlTransferableController(System.Action`1<System.IO.MemoryStream>) pop <null> ldc.i4 0 ldsfld <Module>{df973447-2985-4edc-88d3-5e292cf4d240} <Module>{df973447-2985-4edc-88d3-5e292cf4d240}::m_f9a80fa2aa9a4cd0a7bfcaad712d07c9 ldfld System.Int32 <Module>{df973447-2985-4edc-88d3-5e292cf4d240}::m_1f9ad7e256ab4878b04bf5256b3bd400 brfalse IL_0012: switch(IL_0059,IL_0029,IL_0028) pop <null> ldc.i4 0 br IL_0012: switch(IL_0059,IL_0029,IL_0028) ldsfld Bpotkwxcn.Controllers.GroupedController/<>c Bpotkwxcn.Controllers.GroupedController/<>c::m_GroupedLogger ldftn System.Void Bpotkwxcn.Controllers.GroupedController/<>c::MoveStub(System.IO.MemoryStream) newobj System.Void System.Action`1<System.IO.MemoryStream>::.ctor(System.Object,System.IntPtr) dup <null> stsfld System.Action`1<System.IO.MemoryStream> Bpotkwxcn.Controllers.GroupedController/<>c::_AttachedTag call System.Void Bpotkwxcn.Controllers.GroupedController::ControlTransferableController(System.Action`1<System.IO.MemoryStream>) ldc.i4 1 ldsfld <Module>{df973447-2985-4edc-88d3-5e292cf4d240} <Module>{df973447-2985-4edc-88d3-5e292cf4d240}::m_f9a80fa2aa9a4cd0a7bfcaad712d07c9 ldfld System.Int32 <Module>{df973447-2985-4edc-88d3-5e292cf4d240}::m_2238def2371c4d378a0e247a5c154360 brfalse IL_0012: switch(IL_0059,IL_0029,IL_0028) pop <null> ldc.i4 2 br IL_0012: switch(IL_0059,IL_0029,IL_0028)