cba174a408dfcca1ae39f323ed962029

PE Executable

MD5: cba174a408dfcca1ae39f323ed962029

Size: 1.36 MB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Low

MD5	cba174a408dfcca1ae39f323ed962029
Sha1	14b6a3432c1085b26018d5d8030db48004e21d0e
Sha256	74ca6103ae0698ead4f1d31cae32731bec187c268397b96e892fbb7c85303e7f
Sha384	c14fa51fcc450eb2dccdfbf7a77b35bf11d041221530982203894d377d2a31cb989271a81bb5c28f3f138bec2228cd1d
Sha512	262eefc578d668028efd83d7b1863b7c18f81dc2129f6ff90a44121bfd8edc01ae82aadb1ae5169afe1dc5fb2a5eb78673f870cd8f6836cf213af4d6113eee4a
SSDeep	24576:458gB6XyTAcSMF26QAzTatGApN894iW04hWiibtAlz2KKlEQ90sS/CgHHu:4GgB6/cS626Q6TatXC940piiJSz2nlE3
TLSH	4A5512646668AB16ECFE57F40DA3F23817B90D99B4B2D3855CDA1DEF3B207448528383

PeID

Microsoft Visual C++ DLLMicrosoft Visual C++ v6.0

STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1

Name	Value
Module Name	ldHr.exe
Full Name	ldHr.exe
EntryPoint	System.Void FloodBarrier.Program::Main()
Scope Name	ldHr.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	ldHr
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	494
Main Method	System.Void FloodBarrier.Program::Main()
Main IL Instruction Count	22
Main IL	nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> call System.Void FloodBarrier.Program::ResetirajSimulaciju() nop <null> newobj System.Void FloodBarrier.FormaUstje::.ctor() stsfld FloodBarrier.FormaUstje FloodBarrier.Program::fUstje newobj System.Void FloodBarrier.FormaBrana::.ctor() stsfld FloodBarrier.FormaBrana FloodBarrier.Program::fBrana newobj System.Void FloodBarrier.FormaSliv::.ctor() stsfld FloodBarrier.FormaSliv FloodBarrier.Program::fSliv newobj System.Void FloodBarrier.FormaDogadaj::.ctor() stsfld FloodBarrier.FormaDogadaj FloodBarrier.Program::fDogadaj newobj System.Void FloodBarrier.FormaIzvjestaj::.ctor() stsfld FloodBarrier.FormaIzvjestaj FloodBarrier.Program::fIzvjestaj ldsfld FloodBarrier.FormaUstje FloodBarrier.Program::fUstje call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Info	PE Detect: PeReader OK (file layout)

No malware configuration was found at this point.

You must be signed in to view YARA rules.