Suspicious
Suspect

dc9792fe7d61fa3861ce3f5ffa8278e2

Share on LinkedIn
Print
PE Executable
MD5: dc9792fe7d61fa3861ce3f5ffa8278e2
Size: 1.8 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Very high
MD5 dc9792fe7d61fa3861ce3f5ffa8278e2
Sha1 16923c81ff9564b8a16070e3c9dc51941711fc47
Sha256 cf790980d19ae946d6de6a03100ec1c207ceff95cf7e220d90108c2749fd0f63
Sha384 ea2750b057d3067cae3b76c51a43c6287d9df9274154715cfe731e3bb5fe19683fe5b1448ba742c9ee7c07864bdccf4e
Sha512 8e4a00a00e643fc2b164ce03f475e06e08fd239f26d0ea8ad1dabb9d98996920885db7e59b38f59ff7152e63b7fcb77e8e81783932fd7b7759be186f3edc41bb
SSDeep 24576:TlLoRymbJ8wgMh4CEv3ksjU6UsHMcrE0Jv3oqv5BYg9AxMkD/zfp:tajbOhMhjE/7xUsHtJv3sxMQ
TLSH 4A85F12037E94A44F4FE5B78457246105BF9FC0BAE32DA1E6E8420DE1D79F418AA1B73
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NETUPolyX 0.3 -> delikon
dc9792fe7d61fa3861ce3f5ffa8278e2
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
Rofowenzo.lenoma.dt
2xrH_Xd6.eAa9w2Ta6Ft.resources
7aceaebeb5fad2.Resources.resources
f778e6ce0
[NBF]root.Data
f778e6ce1
[NBF]root.Data
f778e6ce10
[NBF]root.Data
f778e6ce11
[NBF]root.Data
f778e6ce12
[NBF]root.Data
f778e6ce13
[NBF]root.Data
f778e6ce14
[NBF]root.Data
f778e6ce15
[NBF]root.Data
f778e6ce16
[NBF]root.Data
f778e6ce17
[NBF]root.Data
f778e6ce18
[NBF]root.Data
f778e6ce19
[NBF]root.Data
f778e6ce2
[NBF]root.Data
f778e6ce20
[NBF]root.Data
f778e6ce21
[NBF]root.Data
f778e6ce22
[NBF]root.Data
f778e6ce23
[NBF]root.Data
f778e6ce24
[NBF]root.Data
f778e6ce25
[NBF]root.Data
f778e6ce26
[NBF]root.Data
f778e6ce27
[NBF]root.Data
f778e6ce28
[NBF]root.Data
f778e6ce29
[NBF]root.Data
f778e6ce3
[NBF]root.Data
f778e6ce30
[NBF]root.Data
f778e6ce31
[NBF]root.Data
f778e6ce32
[NBF]root.Data
f778e6ce33
[NBF]root.Data
f778e6ce34
[NBF]root.Data
f778e6ce35
[NBF]root.Data
f778e6ce36
[NBF]root.Data
f778e6ce37
[NBF]root.Data
f778e6ce38
[NBF]root.Data
f778e6ce39
[NBF]root.Data
f778e6ce4
[NBF]root.Data
f778e6ce40
[NBF]root.Data
f778e6ce41
[NBF]root.Data
f778e6ce42
[NBF]root.Data
f778e6ce43
[NBF]root.Data
f778e6ce44
[NBF]root.Data
f778e6ce45
[NBF]root.Data
f778e6ce46
[NBF]root.Data
f778e6ce47
[NBF]root.Data
f778e6ce48
[NBF]root.Data
f778e6ce49
[NBF]root.Data
f778e6ce5
[NBF]root.Data
f778e6ce50
[NBF]root.Data
f778e6ce51
[NBF]root.Data
f778e6ce52
[NBF]root.Data
f778e6ce53
[NBF]root.Data
f778e6ce54
[NBF]root.Data
f778e6ce55
[NBF]root.Data
f778e6ce56
[NBF]root.Data
f778e6ce57
[NBF]root.Data
f778e6ce58
[NBF]root.Data
f778e6ce59
[NBF]root.Data
f778e6ce6
[NBF]root.Data
f778e6ce60
[NBF]root.Data
f778e6ce61
[NBF]root.Data
f778e6ce62
[NBF]root.Data
f778e6ce63
[NBF]root.Data
f778e6ce64
[NBF]root.Data
f778e6ce7
[NBF]root.Data
f778e6ce8
[NBF]root.Data
f778e6ce9
[NBF]root.Data
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
2xrH_Xd6
Full Name
2xrH_Xd6
EntryPoint
System.Void 2xrH_Xd6.eAa9w2Ta6Ft/Pit4ag7LeSm.Mpt36wLoeDc9::yWs96qH()
Scope Name
2xrH_Xd6
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
2xrH_Xd6
Assembly Version
19.1.46.95
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
2470
Main Method
System.Void 2xrH_Xd6.eAa9w2Ta6Ft/Pit4ag7LeSm.Mpt36wLoeDc9::yWs96qH()
Main IL Instruction Count
4
Main IL 
nop <null>
newobj System.Void 2xrH_Xd6.zi9AbWt18qe/1tbGojZ0Ew9.7Ldxz6XcqNp4g1::.ctor()
stloc.0 <null>
ret <null>
Module Name
2xrH_Xd6
Full Name
2xrH_Xd6
EntryPoint
System.Void 2xrH_Xd6.eAa9w2Ta6Ft/Pit4ag7LeSm.Mpt36wLoeDc9::yWs96qH()
Scope Name
2xrH_Xd6
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
2xrH_Xd6
Assembly Version
19.1.46.95
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
2470
Main Method
System.Void 2xrH_Xd6.eAa9w2Ta6Ft/Pit4ag7LeSm.Mpt36wLoeDc9::yWs96qH()
Main IL Instruction Count
4
Main IL 
nop <null>
newobj System.Void 2xrH_Xd6.zi9AbWt18qe/1tbGojZ0Ew9.7Ldxz6XcqNp4g1::.ctor()
stloc.0 <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙