Suspicious
Suspect

bc2384b22b960ceac16fddf2bd3f39a9

PE Executable
MD5: bc2384b22b960ceac16fddf2bd3f39a9
Size: 444.42 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Very high
MD5 bc2384b22b960ceac16fddf2bd3f39a9
Sha1 d67f164e763e6773162a2916047bcafdb0ffe100
Sha256 e1bae7b12943d03f1077f98b3ace2886cfb7632ed15623f99c2c763b60a1ba98
Sha384 2aa323a2b456a1f97b8dd76cec8f37e16b60c458f10a7b0b81cad4697f540db84c8a942d88c7b300d6cab3604bbc9190
Sha512 698879b1b5163aba212fe7fe09f5a548c2454fdffd7ae21f166cc6435a0157a1481c84cf3d79b652819d6c8bbb8f81b2d708c64a8db66ad12a9f32f0720ce70c
SSDeep 6144:FQqHvnhoOXgo8cwCdIrgF4TcJ32/3t3WpZ38geyshhGqh1jc05nSBFB:pHvhjv8bCdZFvm/9mp58Dysh8qXc2n
TLSH B194234045FDD8E6E59B8636DDD77CA85920C283684AEB7F70098B4D1F43BF84A12D2E
PeID
Microsoft Visual C++ DLLMicrosoft Visual C++ v6.0
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Tbrksclvt.Properties.Resources.resources
Xsimh
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
Tbrksclvt.exe
Full Name
Tbrksclvt.exe
EntryPoint
System.Void Tbrksclvt.Lcbtrdpve::Main()
Scope Name
Tbrksclvt.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Tbrksclvt
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.0
Total Strings
5
Main Method
System.Void Tbrksclvt.Lcbtrdpve::Main()
Main IL Instruction Count
2
Main IL
call System.Void PJS45uaAMwVZBaEBfc.qL6Xc97W6ieLMWlTHq::BL9g5XJOo()
ret <null>
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Tbrksclvt.Properties.Resources.resources
Xsimh
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙