Deep Malware Analysis of c4fe9b8103301db0f9ea76c5efd14288 | md5: c4fe9b8103301db0f9ea76c5efd14288 | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.47

PE Executable

MD5: c4fe9b8103301db0f9ea76c5efd14288

Size: 1.26 MB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Medium

MD5	c4fe9b8103301db0f9ea76c5efd14288
Sha1	5eb2eb56a609450ef711ecd0fe8341850f401bdd
Sha256	1e1a5e570fcc7175e7bf0cff282be1dfb5de613eb19d0a47d666c429ab7668b5
Sha384	3b80e87b7ceabbc4c1e600067fbe7720b5b2df9b269527fbf93c0c83dbccc809405e20e3a0ef4f6480db88b7370f3a5a
Sha512	765c4345aa62e7d9aa850aec0d1d2311f52617cf14b5b465932bda6e1728c18831ca989298adc42a118a618f380ecba55beff1192ea828750d50d4a1875d91bb
SSDeep	24576:nSf7AuzPK3M3Kf2Pot+T3NZw8o7NsldorH6t7u5dzrHBFPd2mnaz:Sf7AuzPKmPqoNdcNU57u98
TLSH	6D4512096B1EEF02D9C257F24970D37523B0DD09A811E3124EED7CEBB9A9F062959B43

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: IPGW.pdb
Module Name	IPGW.exe
Full Name	IPGW.exe
EntryPoint	System.Void SpaceCalculator.Program::Main()
Scope Name	IPGW.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	IPGW
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	414
Main Method	System.Void SpaceCalculator.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void SpaceCalculator.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.