c2e50d8ee2dfd0813d9692da01e3d470

PE Executable

MD5: c2e50d8ee2dfd0813d9692da01e3d470

Size: 847.36 KB

application/x-dosexec

Ctrl + scroll to zoom · drag to pan

The file bridgeperf.exe is a 827.5 KB PE Executable classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 9 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: d41d3a534ca8bacd8133591b94e9dc639e95d23eccc5c546b4cd95fff0c6087f
MD5: c2e50d8ee2dfd0813d9692da01e3d470
Verdict: Malicious
File type: PE Executable · 827.5 KB

Cite this report: https://app.malva.re/sha256/d41d3a534ca8bacd8133591b94e9dc639e95d23eccc5c546b4cd95fff0c6087f

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Size

847.36 KB · 847,360 B

First seen

2026-11-04 09:15 · an hour ago

Last seen

2026-11-04 09:15 · an hour ago

Last analysis

2026-11-04 09:15 · an hour ago

Hashes

MD5 c2e50d8ee2dfd0813d9692da01e3d470 Sha1 1e9fe57a01a0e1e832b5b69c88a1f41084300a7e Sha256 d41d3a534ca8bacd8133591b94e9dc639e95d23eccc5c546b4cd95fff0c6087f Sha384 df5f680a3891c4ea98982c5b0f6e74937f55244f8225baa5ec83d465f0eb9d4f078cc7dbcf2395bf9f29d28dbbce6f03 Sha512 a0118cf5d64f390b8fd52a28de57a3b715008cc417ec0027e30b8b7dd3fe0ef80517bbf58f998c2f52773400619e286311c0ceebb2d6253a426853edb2eafce7 SSDeep 12288:4Cuk7jgMv14geUAv2d3zS1sj4CjIepbkRLk1YgKJxhcr8R:XsMv1iD2djq2jRCZDJ88R TLSH BC05F702BE44CE11F0191633C3EF654987B0A95166A6E32B7DBA377E15123AB3C0D9DB

Detection

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Symbol obfuscation

Very high

1 malicious · 4 files

EXEbridgeperf.exe

Structure

BIN.Net Resources

BINResources

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe>pe:rsrc>bin

Shape pe:exe>pe:rsrc>bin

malicious 3 nodes

Path pe:exe>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Module Name	vHeozuRid6CRlr9c58cvmP
Full Name	vHeozuRid6CRlr9c58cvmP
EntryPoint	System.Void dvJ3kM6CqtuYAgIeN7M.LuIxfJ6VGdVwi991y3N::qVxPpaAHdn()
Scope Name	vHeozuRid6CRlr9c58cvmP
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	I5TmTGQzSabP1leyjixKgnoG9iKxjaCzfKWtgI7cNGt
Assembly Version	8.1.4.1
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	63
Main Method	System.Void dvJ3kM6CqtuYAgIeN7M.LuIxfJ6VGdVwi991y3N::qVxPpaAHdn()
Main IL Instruction Count	14
Main IL	`br.s IL_000B: ldc.i4.0 call <null> ldnull <null> ldc.i4.0 <null> ldelem.ref <null> pop <null> ldc.i4.0 <null> brtrue.s IL_0007: ldnull call System.Void YAavIlPtnaVXnCMheMS.BwRLw1PIy96y13uSwQC::kLjw4iIsCLsZtxc4lksN0j() nop <null> ldsfld System.Object dvJ3kM6CqtuYAgIeN7M.LuIxfJ6VGdVwi991y3N::u0JP0ZNqlO callvirt System.Void ENsSag6ICoprdDLoe9t.DNRkki6MClRl9SqsgjK::DT9jdtLLuL() nop <null> ret <null>`
Module Name	vHeozuRid6CRlr9c58cvmP
Full Name	vHeozuRid6CRlr9c58cvmP
EntryPoint	System.Void dvJ3kM6CqtuYAgIeN7M.LuIxfJ6VGdVwi991y3N::qVxPpaAHdn()
Scope Name	vHeozuRid6CRlr9c58cvmP
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	I5TmTGQzSabP1leyjixKgnoG9iKxjaCzfKWtgI7cNGt
Assembly Version	8.1.4.1
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	63
Main Method	System.Void dvJ3kM6CqtuYAgIeN7M.LuIxfJ6VGdVwi991y3N::qVxPpaAHdn()
Main IL Instruction Count	14
Main IL	`br.s IL_000B: ldc.i4.0 call <null> ldnull <null> ldc.i4.0 <null> ldelem.ref <null> pop <null> ldc.i4.0 <null> brtrue.s IL_0007: ldnull call System.Void YAavIlPtnaVXnCMheMS.BwRLw1PIy96y13uSwQC::kLjw4iIsCLsZtxc4lksN0j() nop <null> ldsfld System.Object dvJ3kM6CqtuYAgIeN7M.LuIxfJ6VGdVwi991y3N::u0JP0ZNqlO callvirt System.Void ENsSag6ICoprdDLoe9t.DNRkki6MClRl9SqsgjK::DT9jdtLLuL() nop <null> ret <null>`

c2e50d8ee2dfd0813d9692da01e3d470

Overview

Summary by MalvaGPT

Characteristics

File Structure

Information38

c2e50d8ee2dfd0813d9692da01e3d470 (847.36 KB)

File Structure