Suspicious
Suspect

d405cfc556f1d062abfea43f4a7784eb

Share on LinkedIn
Print
PE Executable
MD5: d405cfc556f1d062abfea43f4a7784eb
Size: 1.04 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Very high
MD5 d405cfc556f1d062abfea43f4a7784eb
Sha1 a7f3a6c3d630dc4829416c1662b34dcadf38962d
Sha256 6cdd279b2489fe29fc620e124c4398069d14fcfd8b3dd9e34b7c3a5ef05884d2
Sha384 08cb0559cebde470a702c14b9d13905bf8c8e37f0c0099cf4d9d04075649fe239098ee60464fcc6e657be40d556d1372
Sha512 1633bf9284411c0388b763c071d9c4d91f47a9c33964e84a9fb0c54650a898ea0941b6858ad312a0a95bcc748508ba6887810e86cf15fa37bb22d4aad0b3ed25
SSDeep 12288:wBhpcYL2jIh+dyHE9p+cXWfYQM1XZRrNXl9qAjg7OwXyF9fvN5mwPID0n8cSNKS:4hNL2MhgqlgQMFpl9xeAdGMS
TLSH E125E08113E89A19F8BEAB7C5478052087F5FC56EA35E73E2E5840ED1872F81DA51B33
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
d405cfc556f1d062abfea43f4a7784eb
.Net Resources
Tafinobix.kbfida.levi
7ifXsyJ6.Resources.resources
3f23d2741932aa.Resources.resources
e88d6ebc0
[NBF]root.Data
e88d6ebc1
[NBF]root.Data
e88d6ebc10
[NBF]root.Data
e88d6ebc11
[NBF]root.Data
e88d6ebc2
[NBF]root.Data
e88d6ebc3
[NBF]root.Data
e88d6ebc4
[NBF]root.Data
e88d6ebc5
[NBF]root.Data
e88d6ebc6
[NBF]root.Data
e88d6ebc7
[NBF]root.Data
e88d6ebc8
[NBF]root.Data
e88d6ebc9
[NBF]root.Data
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Module Name
7ifXsyJ6
Full Name
7ifXsyJ6
EntryPoint
System.Void 7ifXsyJ6.qBr6P1::ka0Ge5Ysrn8ZJ4()
Scope Name
7ifXsyJ6
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
7ifXsyJ6
Assembly Version
19.8.17.281
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
1399
Main Method
System.Void 7ifXsyJ6.qBr6P1::ka0Ge5Ysrn8ZJ4()
Main IL Instruction Count
41
Main IL 
nop <null>
newobj System.Void System.Windows.Forms.Form::.ctor()
stloc.0 <null>
ldc.r8 25
stloc.1 <null>
ldloc.1 <null>
ldc.r8 1
sub <null>
call System.Double System.Math::Round(System.Double)
conv.ovf.i4 <null>
ldc.i4.1 <null>
add.ovf <null>
newarr System.Object
stloc.2 <null>
ldstr kbfida.levi
stloc.3 <null>
ldloc.3 <null>
call System.Object 7ifXsyJ6.RenoLedger.8xsWG3gagQ5iYn/fb0Ld6Xy5i.0HrpnkE::Tpj25WifJ_q61K(System.String)
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
stloc.s V_4
ldloc.s V_4
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
call System.Object 7ifXsyJ6.qBr6P1::Mj3fqBp29c(System.Object)
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
stloc.s V_5
ldloc.2 <null>
ldloc.1 <null>
ldc.r8 1
sub <null>
call System.Double System.Math::Round(System.Double)
conv.ovf.i4 <null>
ldloc.s V_5
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
stelem.ref <null>
ldloc.2 <null>
ldloc.1 <null>
call System.Double System.Math::Round(System.Double)
conv.ovf.i4 <null>
call System.Void 7ifXsyJ6.qBr6P1::Wr6y5ac(System.Object[],System.Int32)
nop <null>
ret <null>
Info
PE Detect: PeReader OK (file layout)
Module Name
7ifXsyJ6
Full Name
7ifXsyJ6
EntryPoint
System.Void 7ifXsyJ6.qBr6P1::ka0Ge5Ysrn8ZJ4()
Scope Name
7ifXsyJ6
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
7ifXsyJ6
Assembly Version
19.8.17.281
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
1399
Main Method
System.Void 7ifXsyJ6.qBr6P1::ka0Ge5Ysrn8ZJ4()
Main IL Instruction Count
41
Main IL 
nop <null>
newobj System.Void System.Windows.Forms.Form::.ctor()
stloc.0 <null>
ldc.r8 25
stloc.1 <null>
ldloc.1 <null>
ldc.r8 1
sub <null>
call System.Double System.Math::Round(System.Double)
conv.ovf.i4 <null>
ldc.i4.1 <null>
add.ovf <null>
newarr System.Object
stloc.2 <null>
ldstr kbfida.levi
stloc.3 <null>
ldloc.3 <null>
call System.Object 7ifXsyJ6.RenoLedger.8xsWG3gagQ5iYn/fb0Ld6Xy5i.0HrpnkE::Tpj25WifJ_q61K(System.String)
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
stloc.s V_4
ldloc.s V_4
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
call System.Object 7ifXsyJ6.qBr6P1::Mj3fqBp29c(System.Object)
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
stloc.s V_5
ldloc.2 <null>
ldloc.1 <null>
ldc.r8 1
sub <null>
call System.Double System.Math::Round(System.Double)
conv.ovf.i4 <null>
ldloc.s V_5
call System.Object System.Runtime.CompilerServices.RuntimeHelpers::GetObjectValue(System.Object)
stelem.ref <null>
ldloc.2 <null>
ldloc.1 <null>
call System.Double System.Math::Round(System.Double)
conv.ovf.i4 <null>
call System.Void 7ifXsyJ6.qBr6P1::Wr6y5ac(System.Object[],System.Int32)
nop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙