df76796b79793fbc464034599dee6110

PE Executable

MD5: df76796b79793fbc464034599dee6110

Size: 219.65 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Size

219.65 KB · 219,648 B

First seen

2026-09-27 10:15 · 28 days ago

Last seen

2026-09-27 10:15 · 28 days ago

Last analysis

2026-09-27 10:15 · 28 days ago

Hashes

MD5 df76796b79793fbc464034599dee6110 Sha1 8abc279df5671a54fafdf09ec9de348068e7798f Sha256 a46830c5f0f09c4d211cc2bc8879b513885998d98cbcb6a05a124ba404bc7085 Sha384 c1117218644b9e1478e04a01cd7425d440b022146a4c80f0efae441a9474e8a2b2230baca407333aaf5d3c27765a31ff Sha512 c9c230dda8ff0228e717c62104e675302fa79d36868a961e586e022c50eaea2cfd3df3d880f389bd44706500b89dc5649a9fc0a230dd58cc276dbcfe938f4927 SSDeep 6144:D8gwv2AVdiUnRtjU2MUeQBSvpMW90KImQisnBbxV:D8gwvhTiAjV22 TLSH 27246C5423AB897ED6BF83BDE4A6124B07F5E513CA53E70D185A90BD1923B00F722793

Detection

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Symbol obfuscation

Very low

17 files

EXEdf76796b79793fbc464034599dee6110

Structure

BIN.Net Resources

BINaR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources

BIN$this.GridSize

ICON$this.Icon

BIN[NBF]root.IconData

BIN$this.Language

BINprogressBar1.Modifiers

BINns0.GForm0.resources

ICON$this.Icon

BIN[NBF]root.IconData

BINns0.GForm2.resources

BINart.Image

IMG[NBF]root.Data

IMG[NBF]root.Data-preview.png

BINpdutjyre4.b2v5db78j

BINResources

BINRT_VERSION

BINID:0001

BINID:0

BINRT_MANIFEST

BINID:0001

BINID:0

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

3 / 3

Path pe:exe~T1059.007>pe:rsrc>bin

Shape pe:exe>pe:rsrc>bin

technique3 nodes

Path pe:exe~T1059.007>bin

Shape pe:exe>bin

technique2 nodes

Name	Value
Module Name	Stub.exe
Full Name	Stub.exe
EntryPoint	System.Void ns0.Form0::Main(System.String[])
Scope Name	Stub.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Stub
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	650
Main Method	System.Void ns0.Form0::Main(System.String[])
Main IL Instruction Count	6
Main IL	`call System.Boolean Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::get_UseCompatibleTextRendering() call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call ns0.Form0 ns0.Class1::get_Form0_0() ldarg.0 <null> callvirt System.Void Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::Run(System.String[]) ret <null>`
Module Name	Stub.exe
Full Name	Stub.exe
EntryPoint	System.Void ns0.Form0::Main(System.String[])
Scope Name	Stub.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Stub
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	650
Main Method	System.Void ns0.Form0::Main(System.String[])
Main IL Instruction Count	6
Main IL	`call System.Boolean Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::get_UseCompatibleTextRendering() call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) call ns0.Form0 ns0.Class1::get_Form0_0() ldarg.0 <null> callvirt System.Void Microsoft.VisualBasic.ApplicationServices.WindowsFormsApplicationBase::Run(System.String[]) ret <null>`

17 files

EXEdf76796b79793fbc464034599dee6110

Structure

BIN.Net Resources

BINResources

No malware configuration was found at this point.