Suspicious
Suspect

PE Executable
MD5: e112c8cfcb1776b6f91d536bc61badd7
Size: 912.9 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Very high
MD5 e112c8cfcb1776b6f91d536bc61badd7
Sha1 6cefa35fecfca9f447241b3c33ed9abc7ecbfdaa
Sha256 1439e036d8b04775d5462e7dbbb6e0b90e7668545f7ca5dae2aac74e84b184aa
Sha384 1369569bd2895cbda13b3b4c84fc88ad4910a0a49c1e3c85c276e61b38f83b32284370d2c31659dc06ca9bd51d313fff
Sha512 1974606012d7728533cc5499ac33f7bdb84d5edcc08760bc74ef1b5baeebfaeb90ffbca509166141130be3f176b239ad7e21c6a18e7212b32590e746f9de9221
SSDeep 12288:EhKT9pwkQwJGKNTokGOuXJxNB3+MLi6S2YI1Qsc6F3lrK/CDtCT9fDA+:Ehk/NToNOYwMWTsjF3le7Th3
TLSH B015CF415E872F64E99D0B7CC412009977F4E84756A6E76F6FED80F4A8BBF88CE06811
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
e112c8cfcb1776b6f91d536bc61badd7
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
db4P8Xsb.Resources.resources
db4P8Xsb.g.resources
f3aaeb64d254a5.Resources.resources
90dfc46d0
[NBF]root.Data
90dfc46d1
[NBF]root.Data
90dfc46d10
[NBF]root.Data
90dfc46d11
[NBF]root.Data
90dfc46d12
[NBF]root.Data
90dfc46d13
[NBF]root.Data
90dfc46d14
[NBF]root.Data
90dfc46d15
[NBF]root.Data
90dfc46d16
[NBF]root.Data
90dfc46d17
[NBF]root.Data
90dfc46d18
[NBF]root.Data
90dfc46d19
[NBF]root.Data
90dfc46d2
[NBF]root.Data
90dfc46d20
[NBF]root.Data
90dfc46d21
[NBF]root.Data
90dfc46d22
[NBF]root.Data
90dfc46d23
[NBF]root.Data
90dfc46d3
[NBF]root.Data
90dfc46d4
[NBF]root.Data
90dfc46d5
[NBF]root.Data
90dfc46d6
[NBF]root.Data
90dfc46d7
[NBF]root.Data
90dfc46d8
[NBF]root.Data
90dfc46d9
[NBF]root.Data
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
db4P8Xsb
Full Name
db4P8Xsb
EntryPoint
System.Void 8ftZW.Pat65Kbck8/sBe9Pi0.za6P4Dps_7a::xXf68xoC()
Scope Name
db4P8Xsb
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
db4P8Xsb
Assembly Version
28.26.13.53
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
0
Main Method
System.Void 8ftZW.Pat65Kbck8/sBe9Pi0.za6P4Dps_7a::xXf68xoC()
Main IL Instruction Count
7
Main IL 
nop <null>
newobj System.Void Xf8jd1sJ9.Jr0c1dz::.ctor()
stloc.0 <null>
ret <null>
ldtoken System.Void 8ftZW.Pat65Kbck8/sBe9Pi0.za6P4Dps_7a::xXf68xoC()
pop <null>
ret <null>
Module Name
db4P8Xsb
Full Name
db4P8Xsb
EntryPoint
System.Void 8ftZW.Pat65Kbck8/sBe9Pi0.za6P4Dps_7a::xXf68xoC()
Scope Name
db4P8Xsb
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
db4P8Xsb
Assembly Version
28.26.13.53
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.6
Total Strings
0
Main Method
System.Void 8ftZW.Pat65Kbck8/sBe9Pi0.za6P4Dps_7a::xXf68xoC()
Main IL Instruction Count
7
Main IL 
nop <null>
newobj System.Void Xf8jd1sJ9.Jr0c1dz::.ctor()
stloc.0 <null>
ret <null>
ldtoken System.Void 8ftZW.Pat65Kbck8/sBe9Pi0.za6P4Dps_7a::xXf68xoC()
pop <null>
ret <null>
e112c8cfcb1776b6f91d536bc61badd7
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
.Net Resources
db4P8Xsb.Resources.resources
db4P8Xsb.g.resources
f3aaeb64d254a5.Resources.resources
90dfc46d0
[NBF]root.Data
90dfc46d1
[NBF]root.Data
90dfc46d10
[NBF]root.Data
90dfc46d11
[NBF]root.Data
90dfc46d12
[NBF]root.Data
90dfc46d13
[NBF]root.Data
90dfc46d14
[NBF]root.Data
90dfc46d15
[NBF]root.Data
90dfc46d16
[NBF]root.Data
90dfc46d17
[NBF]root.Data
90dfc46d18
[NBF]root.Data
90dfc46d19
[NBF]root.Data
90dfc46d2
[NBF]root.Data
90dfc46d20
[NBF]root.Data
90dfc46d21
[NBF]root.Data
90dfc46d22
[NBF]root.Data
90dfc46d23
[NBF]root.Data
90dfc46d3
[NBF]root.Data
90dfc46d4
[NBF]root.Data
90dfc46d5
[NBF]root.Data
90dfc46d6
[NBF]root.Data
90dfc46d7
[NBF]root.Data
90dfc46d8
[NBF]root.Data
90dfc46d9
[NBF]root.Data
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙