Deep Malware Analysis of daa46b833b44e542c385ae5487efd482 | md5: daa46b833b44e542c385ae5487efd482 | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | .Net | SOS: 0.88

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Very high

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	smilebuildcry.exe
Full Name	smilebuildcry.exe
EntryPoint	System.Void smilebuildcry.Templating.TemplateServer::GenerateStaticTemplate()
Scope Name	smilebuildcry.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	smilebuildcry
Assembly Version	1.0.3686.1653
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.6
Total Strings	6
Main Method	System.Void smilebuildcry.Templating.TemplateServer::GenerateStaticTemplate()
Main IL Instruction Count	33
Main IL	ldc.i4 3 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_002C: newobj System.Void smilebuildcry.Templating.CustomizableTemplate::.ctor() newobj System.Void smilebuildcry.Templating.CustomizableTemplate::.ctor() ldloc.s V_1 call System.Void smilebuildcry.Templating.CustomizableTemplate::UpdateTemplate(System.Byte[]) ldc.i4 0 ldsfld <Module>{062bade0-4a1d-4833-af6e-91e83b27395b} <Module>{062bade0-4a1d-4833-af6e-91e83b27395b}::m_cdb3ba63b0e946aca9c4a83145c922f6 ldfld System.Int32 <Module>{062bade0-4a1d-4833-af6e-91e83b27395b}::m_db5fe78b48be4a16bef6333dc0ae9f29 brtrue IL_0012: switch(IL_002C,IL_0084,IL_0057,IL_0085) pop <null> ldc.i4 1 br IL_0012: switch(IL_002C,IL_0084,IL_0057,IL_0085) newobj System.Void Yotcqich.Core.ProgramDispatcher::.ctor() ldloc.s V_2 call System.Byte[] Yotcqich.Core.ProgramDispatcher::TerminatePassiveProgram(System.Byte[]) stloc.s V_1 ldc.i4 0 ldsfld <Module>{062bade0-4a1d-4833-af6e-91e83b27395b} <Module>{062bade0-4a1d-4833-af6e-91e83b27395b}::m_cdb3ba63b0e946aca9c4a83145c922f6 ldfld System.Int32 <Module>{062bade0-4a1d-4833-af6e-91e83b27395b}::m_6a776b00dbba4e8d88ab2f2f07c06893 brtrue IL_0012: switch(IL_002C,IL_0084,IL_0057,IL_0085) pop <null> ldc.i4 0 br IL_0012: switch(IL_002C,IL_0084,IL_0057,IL_0085) ret <null> newobj System.Void Yotcqich.DataStructures.ErrorStrategy::.ctor() call System.Byte[] Yotcqich.DataStructures.ErrorStrategy::InvokeTree() stloc.s V_2 ldc.i4 2 br IL_0012: switch(IL_002C,IL_0084,IL_0057,IL_0085)
Module Name	smilebuildcry.exe
Full Name	smilebuildcry.exe
EntryPoint	System.Void smilebuildcry.Templating.TemplateServer::GenerateStaticTemplate()
Scope Name	smilebuildcry.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	smilebuildcry
Assembly Version	1.0.3686.1653
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.6
Total Strings	6
Main Method	System.Void smilebuildcry.Templating.TemplateServer::GenerateStaticTemplate()
Main IL Instruction Count	33
Main IL	ldc.i4 3 stloc V_0 br IL_000E: ldloc V_0 ldloc V_0 switch dnlib.DotNet.Emit.Instruction[] br IL_002C: newobj System.Void smilebuildcry.Templating.CustomizableTemplate::.ctor() newobj System.Void smilebuildcry.Templating.CustomizableTemplate::.ctor() ldloc.s V_1 call System.Void smilebuildcry.Templating.CustomizableTemplate::UpdateTemplate(System.Byte[]) ldc.i4 0 ldsfld <Module>{062bade0-4a1d-4833-af6e-91e83b27395b} <Module>{062bade0-4a1d-4833-af6e-91e83b27395b}::m_cdb3ba63b0e946aca9c4a83145c922f6 ldfld System.Int32 <Module>{062bade0-4a1d-4833-af6e-91e83b27395b}::m_db5fe78b48be4a16bef6333dc0ae9f29 brtrue IL_0012: switch(IL_002C,IL_0084,IL_0057,IL_0085) pop <null> ldc.i4 1 br IL_0012: switch(IL_002C,IL_0084,IL_0057,IL_0085) newobj System.Void Yotcqich.Core.ProgramDispatcher::.ctor() ldloc.s V_2 call System.Byte[] Yotcqich.Core.ProgramDispatcher::TerminatePassiveProgram(System.Byte[]) stloc.s V_1 ldc.i4 0 ldsfld <Module>{062bade0-4a1d-4833-af6e-91e83b27395b} <Module>{062bade0-4a1d-4833-af6e-91e83b27395b}::m_cdb3ba63b0e946aca9c4a83145c922f6 ldfld System.Int32 <Module>{062bade0-4a1d-4833-af6e-91e83b27395b}::m_6a776b00dbba4e8d88ab2f2f07c06893 brtrue IL_0012: switch(IL_002C,IL_0084,IL_0057,IL_0085) pop <null> ldc.i4 0 br IL_0012: switch(IL_002C,IL_0084,IL_0057,IL_0085) ret <null> newobj System.Void Yotcqich.DataStructures.ErrorStrategy::.ctor() call System.Byte[] Yotcqich.DataStructures.ErrorStrategy::InvokeTree() stloc.s V_2 ldc.i4 2 br IL_0012: switch(IL_002C,IL_0084,IL_0057,IL_0085)