Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5: b470e7ec6eb3afa5ab1190c5c672862c
Size: 646.14 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 b470e7ec6eb3afa5ab1190c5c672862c
Sha1 77cae2829c3d5ef543446e922672e3909e338af9
Sha256 8dfa6515ab3df482f4c286932feec38420e606c8bb42e2055f4361db4fc638b9
Sha384 696a99ef1fa69d16a1d8aac93aa21ed4e50a993eb0502a46d00f7c8888fb0eb740c339551662aaf04137cb3026d60326
Sha512 49b043652246fc19e719535336ce8433242db60b521a4acb5a5b842a51f776bf20bc98e7e96afb25370064a640028bc6474946923288ebaeb1942fb5f0fd79ca
SSDeep 12288:ypcASTn5FMvSmvrWg3sWvmZ5StKvH3ZSIFQRMehtAv3CT+J8OD8zXcSWd/3wSr/o:ypcAu5FMzvrd3pvG5StKv3ZSIqRPhOcB
TLSH B6D4015065AADB07D0B71BF26671D1B017B1AE8D6930D30B8FD22EEF74B6B001A92753
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
b470e7ec6eb3afa5ab1190c5c672862c
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
MazeSolver.Formularios.FormPrincipal.resources
MazeSolver.Properties.Resources.resources
Fast_Tot
[NBF]root.Data
[NBF]root.Data-preview.png
TlON
[NBF]root.Data
[NBF]root.Data-preview.png
oO
[NBF]root.Data
[NBF]root.Data-preview.png
shp
[NBF]root.Data
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: BKIL.pdb
Module Name
BKIL.exe
Full Name
BKIL.exe
EntryPoint
System.Void MazeSolver.Program::Main()
Scope Name
BKIL.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
BKIL
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
319
Main Method
System.Void MazeSolver.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void MazeSolver.Formularios.FormPrincipal::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Module Name
BKIL.exe
Full Name
BKIL.exe
EntryPoint
System.Void MazeSolver.Program::Main()
Scope Name
BKIL.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
BKIL
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
319
Main Method
System.Void MazeSolver.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void MazeSolver.Formularios.FormPrincipal::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙