Deep Malware Analysis of cf868181bbb9b3836ff9a991e6475e80 | md5: cf868181bbb9b3836ff9a991e6475e80 | .Net | PE (Portable Executable) | SOS: 0.39 | Executable | Managed .NET | PE File Layout | Win 32 Exe | x86

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Medium

MD5	cf868181bbb9b3836ff9a991e6475e80
Sha1	c4ec84524510b5824601ab75c25754dc5b6c800f
Sha256	807da3533e9fba295f65b74e137bc130262f23d7fc736b0e290123d1a55a58ae
Sha384	169c6554a93ebdcb0a4929b33ca0caeb7e5995d91a589cfbe4c6a1bfe06881db48643cf9cf21b43b5e4209065a2dea24
Sha512	95e1cef98ae42a46cf25674204b1a7760dc82841eb4d93387742c2e9e1f936b92f425c63b27f08baf8f71df08d88753857132bf646bcfae72e3cf8cee7ff2b24
SSDeep	24576:3a8gW5m2fzOQIP73RgxHtWHHbDmJrpd6ZH6BcyJtRK80hj:39gWE27OX7exHQHXI6k5PK3j
TLSH	A905BD506254EE16E8EA16B4D4E2E2FF07B12C9BE411F28799C57EAF3931650FB006C3

STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1

Name	Value
Module Name	XmHx.exe
Full Name	XmHx.exe
EntryPoint	System.Void TeaEstate.Program::Main()
Scope Name	XmHx.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	XmHx
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	432
Main Method	System.Void TeaEstate.Program::Main()
Main IL Instruction Count	22
Main IL	nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> call System.Void TeaEstate.Program::UcitajPostavke() nop <null> newobj System.Void TeaEstate.frmPolje::.ctor() stsfld TeaEstate.frmPolje TeaEstate.Program::fPolje newobj System.Void TeaEstate.frmTvornica::.ctor() stsfld TeaEstate.frmTvornica TeaEstate.Program::fTvornica newobj System.Void TeaEstate.frmSezona::.ctor() stsfld TeaEstate.frmSezona TeaEstate.Program::fSezona newobj System.Void TeaEstate.frmIzvjestaj::.ctor() stsfld TeaEstate.frmIzvjestaj TeaEstate.Program::fIzvjestaj newobj System.Void TeaEstate.frmImanje::.ctor() stsfld TeaEstate.frmImanje TeaEstate.Program::fImanje ldsfld TeaEstate.frmImanje TeaEstate.Program::fImanje call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Info	PE Detect: PeReader OK (file layout)