Suspicious
Suspect

dc9792fe7d61fa3861ce3f5ffa8278e2

PE Executable
MD5: dc9792fe7d61fa3861ce3f5ffa8278e2
Size: 1.8 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Very high
MD5 dc9792fe7d61fa3861ce3f5ffa8278e2
Sha1 16923c81ff9564b8a16070e3c9dc51941711fc47
Sha256 cf790980d19ae946d6de6a03100ec1c207ceff95cf7e220d90108c2749fd0f63
Sha384 ea2750b057d3067cae3b76c51a43c6287d9df9274154715cfe731e3bb5fe19683fe5b1448ba742c9ee7c07864bdccf4e
Sha512 8e4a00a00e643fc2b164ce03f475e06e08fd239f26d0ea8ad1dabb9d98996920885db7e59b38f59ff7152e63b7fcb77e8e81783932fd7b7759be186f3edc41bb
SSDeep 24576:TlLoRymbJ8wgMh4CEv3ksjU6UsHMcrE0Jv3oqv5BYg9AxMkD/zfp:tajbOhMhjE/7xUsHtJv3sxMQ
TLSH 4A85F12037E94A44F4FE5B78457246105BF9FC0BAE32DA1E6E8420DE1D79F418AA1B73
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NETUPolyX 0.3 -> delikon
dc9792fe7d61fa3861ce3f5ffa8278e2
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Rofowenzo.lenoma.dt
2xrH_Xd6.eAa9w2Ta6Ft.resources
7aceaebeb5fad2.Resources.resources
f778e6ce0
[NBF]root.Data
f778e6ce1
[NBF]root.Data
f778e6ce10
[NBF]root.Data
f778e6ce11
[NBF]root.Data
f778e6ce12
[NBF]root.Data
f778e6ce13
[NBF]root.Data
f778e6ce14
[NBF]root.Data
f778e6ce15
[NBF]root.Data
f778e6ce16
[NBF]root.Data
f778e6ce17
[NBF]root.Data
f778e6ce18
[NBF]root.Data
f778e6ce19
[NBF]root.Data
f778e6ce2
[NBF]root.Data
f778e6ce20
[NBF]root.Data
f778e6ce21
[NBF]root.Data
f778e6ce22
[NBF]root.Data
f778e6ce23
[NBF]root.Data
f778e6ce24
[NBF]root.Data
f778e6ce25
[NBF]root.Data
f778e6ce26
[NBF]root.Data
f778e6ce27
[NBF]root.Data
f778e6ce28
[NBF]root.Data
f778e6ce29
[NBF]root.Data
f778e6ce3
[NBF]root.Data
f778e6ce30
[NBF]root.Data
f778e6ce31
[NBF]root.Data
f778e6ce32
[NBF]root.Data
f778e6ce33
[NBF]root.Data
f778e6ce34
[NBF]root.Data
f778e6ce35
[NBF]root.Data
f778e6ce36
[NBF]root.Data
f778e6ce37
[NBF]root.Data
f778e6ce38
[NBF]root.Data
f778e6ce39
[NBF]root.Data
f778e6ce4
[NBF]root.Data
f778e6ce40
[NBF]root.Data
f778e6ce41
[NBF]root.Data
f778e6ce42
[NBF]root.Data
f778e6ce43
[NBF]root.Data
f778e6ce44
[NBF]root.Data
f778e6ce45
[NBF]root.Data
f778e6ce46
[NBF]root.Data
f778e6ce47
[NBF]root.Data
f778e6ce48
[NBF]root.Data
f778e6ce49
[NBF]root.Data
f778e6ce5
[NBF]root.Data
f778e6ce50
[NBF]root.Data
f778e6ce51
[NBF]root.Data
f778e6ce52
[NBF]root.Data
f778e6ce53
[NBF]root.Data
f778e6ce54
[NBF]root.Data
f778e6ce55
[NBF]root.Data
f778e6ce56
[NBF]root.Data
f778e6ce57
[NBF]root.Data
f778e6ce58
[NBF]root.Data
f778e6ce59
[NBF]root.Data
f778e6ce6
[NBF]root.Data
f778e6ce60
[NBF]root.Data
f778e6ce61
[NBF]root.Data
f778e6ce62
[NBF]root.Data
f778e6ce63
[NBF]root.Data
f778e6ce64
[NBF]root.Data
f778e6ce7
[NBF]root.Data
f778e6ce8
[NBF]root.Data
f778e6ce9
[NBF]root.Data
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
2xrH_Xd6
Full Name
2xrH_Xd6
EntryPoint
System.Void 2xrH_Xd6.eAa9w2Ta6Ft/Pit4ag7LeSm.Mpt36wLoeDc9::yWs96qH()
Scope Name
2xrH_Xd6
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
2xrH_Xd6
Assembly Version
19.1.46.95
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
2470
Main Method
System.Void 2xrH_Xd6.eAa9w2Ta6Ft/Pit4ag7LeSm.Mpt36wLoeDc9::yWs96qH()
Main IL Instruction Count
4
Main IL 
nop <null>
newobj System.Void 2xrH_Xd6.zi9AbWt18qe/1tbGojZ0Ew9.7Ldxz6XcqNp4g1::.ctor()
stloc.0 <null>
ret <null>
Module Name
2xrH_Xd6
Full Name
2xrH_Xd6
EntryPoint
System.Void 2xrH_Xd6.eAa9w2Ta6Ft/Pit4ag7LeSm.Mpt36wLoeDc9::yWs96qH()
Scope Name
2xrH_Xd6
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
2xrH_Xd6
Assembly Version
19.1.46.95
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
2470
Main Method
System.Void 2xrH_Xd6.eAa9w2Ta6Ft/Pit4ag7LeSm.Mpt36wLoeDc9::yWs96qH()
Main IL Instruction Count
4
Main IL 
nop <null>
newobj System.Void 2xrH_Xd6.zi9AbWt18qe/1tbGojZ0Ew9.7Ldxz6XcqNp4g1::.ctor()
stloc.0 <null>
ret <null>
dc9792fe7d61fa3861ce3f5ffa8278e2
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Rofowenzo.lenoma.dt
2xrH_Xd6.eAa9w2Ta6Ft.resources
7aceaebeb5fad2.Resources.resources
f778e6ce0
[NBF]root.Data
f778e6ce1
[NBF]root.Data
f778e6ce10
[NBF]root.Data
f778e6ce11
[NBF]root.Data
f778e6ce12
[NBF]root.Data
f778e6ce13
[NBF]root.Data
f778e6ce14
[NBF]root.Data
f778e6ce15
[NBF]root.Data
f778e6ce16
[NBF]root.Data
f778e6ce17
[NBF]root.Data
f778e6ce18
[NBF]root.Data
f778e6ce19
[NBF]root.Data
f778e6ce2
[NBF]root.Data
f778e6ce20
[NBF]root.Data
f778e6ce21
[NBF]root.Data
f778e6ce22
[NBF]root.Data
f778e6ce23
[NBF]root.Data
f778e6ce24
[NBF]root.Data
f778e6ce25
[NBF]root.Data
f778e6ce26
[NBF]root.Data
f778e6ce27
[NBF]root.Data
f778e6ce28
[NBF]root.Data
f778e6ce29
[NBF]root.Data
f778e6ce3
[NBF]root.Data
f778e6ce30
[NBF]root.Data
f778e6ce31
[NBF]root.Data
f778e6ce32
[NBF]root.Data
f778e6ce33
[NBF]root.Data
f778e6ce34
[NBF]root.Data
f778e6ce35
[NBF]root.Data
f778e6ce36
[NBF]root.Data
f778e6ce37
[NBF]root.Data
f778e6ce38
[NBF]root.Data
f778e6ce39
[NBF]root.Data
f778e6ce4
[NBF]root.Data
f778e6ce40
[NBF]root.Data
f778e6ce41
[NBF]root.Data
f778e6ce42
[NBF]root.Data
f778e6ce43
[NBF]root.Data
f778e6ce44
[NBF]root.Data
f778e6ce45
[NBF]root.Data
f778e6ce46
[NBF]root.Data
f778e6ce47
[NBF]root.Data
f778e6ce48
[NBF]root.Data
f778e6ce49
[NBF]root.Data
f778e6ce5
[NBF]root.Data
f778e6ce50
[NBF]root.Data
f778e6ce51
[NBF]root.Data
f778e6ce52
[NBF]root.Data
f778e6ce53
[NBF]root.Data
f778e6ce54
[NBF]root.Data
f778e6ce55
[NBF]root.Data
f778e6ce56
[NBF]root.Data
f778e6ce57
[NBF]root.Data
f778e6ce58
[NBF]root.Data
f778e6ce59
[NBF]root.Data
f778e6ce6
[NBF]root.Data
f778e6ce60
[NBF]root.Data
f778e6ce61
[NBF]root.Data
f778e6ce62
[NBF]root.Data
f778e6ce63
[NBF]root.Data
f778e6ce64
[NBF]root.Data
f778e6ce7
[NBF]root.Data
f778e6ce8
[NBF]root.Data
f778e6ce9
[NBF]root.Data
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙