Deep Malware Analysis of dde54e47b9528926e136845883dc34a3 | md5: dde54e47b9528926e136845883dc34a3 | Executable | PE (Portable Executable) | Win 32 Exe | x86 | .Net | SOS: 0.13

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Very low

MD5	dde54e47b9528926e136845883dc34a3
Sha1	62bb9e595778dc9c3aed812a21444f02bf86a84a
Sha256	ff67a4429b3cd257a8ef58dbbc90450eda82271ef4256ba1dc5fa6eb215fedec
Sha384	5235fd5f34988710345c53163dd5425a84e191c8a85ff0ff76c52b8de21ddb733928a20e9c500753fe68e893eb4e9c21
Sha512	708aba7ed4da519b16a25d59b2e945cf415ccca7a5d416f66dced4600cd42597c9de474fe7280f17830f1c5fdd2a68ad128097cff30a80d07e397f493a6b074f
SSDeep	12288:+any0Ux7g9dfi6fBgzgJevPvBvW+cKpRKZ1Tz6PyrDyKkMoI9bn17aEO0f7RoY+S:9y0Um/fBgtBVLKZx2soo17
TLSH	5CF4CFAC3215B5DFC8A7C5B1CAA4DD74AA216CAB5317C20780D719EFB90CA93DF141E2

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Module Name	DiNf.exe
Full Name	DiNf.exe
EntryPoint	System.Void ProjectWindowsForms.Program::Main()
Scope Name	DiNf.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	DiNf
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	527
Main Method	System.Void ProjectWindowsForms.Program::Main()
Main IL Instruction Count	6
Main IL	call System.Void ProjectWindowsForms.Program::⁫‍‮‭‪‪‫‬‪⁪‏⁯⁯⁬‪‎⁯‮⁫⁪‫‭‬‪‬⁮‫⁪⁮⁮‎⁫⁪⁯‏‭‍⁬‏‮() ldc.i4.0 <null> call System.Void ProjectWindowsForms.Program::‏⁯‫‮⁮‭⁭‮‪⁯⁪⁭⁬‎‫‬‪‍⁭⁪⁫⁯⁭⁯‍‭‍‬⁪⁭‭‎‫⁮‮‭‬‏‏‮(System.Boolean) newobj System.Void ProjectWindowsForms.SmartForm13::.ctor() call System.Void ProjectWindowsForms.Program::‪‭‭‮‪⁪⁮‌‍‍⁫‪‫‭⁮‬‌‬⁮‮‫⁯‏‮⁯‮‮⁫⁬⁯⁬⁫‪‭⁯⁪‌‌‮(System.Windows.Forms.Form) ret <null>
Module Name	DiNf.exe
Full Name	DiNf.exe
EntryPoint	System.Void ProjectWindowsForms.Program::Main()
Scope Name	DiNf.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	DiNf
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	527
Main Method	System.Void ProjectWindowsForms.Program::Main()
Main IL Instruction Count	6
Main IL	call System.Void ProjectWindowsForms.Program::⁫‍‮‭‪‪‫‬‪⁪‏⁯⁯⁬‪‎⁯‮⁫⁪‫‭‬‪‬⁮‫⁪⁮⁮‎⁫⁪⁯‏‭‍⁬‏‮() ldc.i4.0 <null> call System.Void ProjectWindowsForms.Program::‏⁯‫‮⁮‭⁭‮‪⁯⁪⁭⁬‎‫‬‪‍⁭⁪⁫⁯⁭⁯‍‭‍‬⁪⁭‭‎‫⁮‮‭‬‏‏‮(System.Boolean) newobj System.Void ProjectWindowsForms.SmartForm13::.ctor() call System.Void ProjectWindowsForms.Program::‪‭‭‮‪⁪⁮‌‍‍⁫‪‫‭⁮‬‌‬⁮‮‫⁯‏‮⁯‮‮⁫⁬⁯⁬⁫‪‭⁯⁪‌‌‮(System.Windows.Forms.Form) ret <null>

Embedded Resources UNKNWOWNsuspect

2huhuhuhu

Suspicious Type Names (1-2 chars) UNKNWOWN

0huhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential