dde54e47b9528926e136845883dc34a3

PE Executable

MD5: dde54e47b9528926e136845883dc34a3

Size: 763.9 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Very low

MD5	dde54e47b9528926e136845883dc34a3
Sha1	62bb9e595778dc9c3aed812a21444f02bf86a84a
Sha256	ff67a4429b3cd257a8ef58dbbc90450eda82271ef4256ba1dc5fa6eb215fedec
Sha384	5235fd5f34988710345c53163dd5425a84e191c8a85ff0ff76c52b8de21ddb733928a20e9c500753fe68e893eb4e9c21
Sha512	708aba7ed4da519b16a25d59b2e945cf415ccca7a5d416f66dced4600cd42597c9de474fe7280f17830f1c5fdd2a68ad128097cff30a80d07e397f493a6b074f
SSDeep	12288:+any0Ux7g9dfi6fBgzgJevPvBvW+cKpRKZ1Tz6PyrDyKkMoI9bn17aEO0f7RoY+S:9y0Um/fBgtBVLKZx2soo17
TLSH	5CF4CFAC3215B5DFC8A7C5B1CAA4DD74AA216CAB5317C20780D719EFB90CA93DF141E2

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Module Name	DiNf.exe
Full Name	DiNf.exe
EntryPoint	System.Void ProjectWindowsForms.Program::Main()
Scope Name	DiNf.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	DiNf
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	527
Main Method	System.Void ProjectWindowsForms.Program::Main()
Main IL Instruction Count	6
Main IL	call System.Void ProjectWindowsForms.Program::⁫‍‮‭‪‪‫‬‪⁪‏⁯⁯⁬‪‎⁯‮⁫⁪‫‭‬‪‬⁮‫⁪⁮⁮‎⁫⁪⁯‏‭‍⁬‏‮() ldc.i4.0 <null> call System.Void ProjectWindowsForms.Program::‏⁯‫‮⁮‭⁭‮‪⁯⁪⁭⁬‎‫‬‪‍⁭⁪⁫⁯⁭⁯‍‭‍‬⁪⁭‭‎‫⁮‮‭‬‏‏‮(System.Boolean) newobj System.Void ProjectWindowsForms.SmartForm13::.ctor() call System.Void ProjectWindowsForms.Program::‪‭‭‮‪⁪⁮‌‍‍⁫‪‫‭⁮‬‌‬⁮‮‫⁯‏‮⁯‮‮⁫⁬⁯⁬⁫‪‭⁯⁪‌‌‮(System.Windows.Forms.Form) ret <null>
Module Name	DiNf.exe
Full Name	DiNf.exe
EntryPoint	System.Void ProjectWindowsForms.Program::Main()
Scope Name	DiNf.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	DiNf
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	527
Main Method	System.Void ProjectWindowsForms.Program::Main()
Main IL Instruction Count	6
Main IL	call System.Void ProjectWindowsForms.Program::⁫‍‮‭‪‪‫‬‪⁪‏⁯⁯⁬‪‎⁯‮⁫⁪‫‭‬‪‬⁮‫⁪⁮⁮‎⁫⁪⁯‏‭‍⁬‏‮() ldc.i4.0 <null> call System.Void ProjectWindowsForms.Program::‏⁯‫‮⁮‭⁭‮‪⁯⁪⁭⁬‎‫‬‪‍⁭⁪⁫⁯⁭⁯‍‭‍‬⁪⁭‭‎‫⁮‮‭‬‏‏‮(System.Boolean) newobj System.Void ProjectWindowsForms.SmartForm13::.ctor() call System.Void ProjectWindowsForms.Program::‪‭‭‮‪⁪⁮‌‍‍⁫‪‫‭⁮‬‌‬⁮‮‫⁯‏‮⁯‮‮⁫⁬⁯⁬⁫‪‭⁯⁪‌‌‮(System.Windows.Forms.Form) ret <null>

Embedded Resources UNKNWOWNsuspect

2huhuhuhu

Suspicious Type Names (1-2 chars) UNKNWOWN

0huhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

Embedded Resources UNKNWOWNsuspect

2huhuhuhu

dde54e47b9528926e136845883dc34a3

Suspicious Type Names (1-2 chars) UNKNWOWN

0huhuhuhu

dde54e47b9528926e136845883dc34a3

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.