Suspicious
Suspect

PE Executable
MD5: e8c3cf465dcd453a10cea3158132ffb0
Size: 760.83 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 e8c3cf465dcd453a10cea3158132ffb0
Sha1 2c4f6adb00fd49552d2e7030ff255ad3bd6b97dd
Sha256 65140ae2ddd1e19e3dcdd80ad3b6bd652e7388334e1bd1c526486a12b25df026
Sha384 9e6dbab1039672f2ed8a5c15fc1c6debefd2054021566b20946d53fcb915ea68631266f75447099fe6d1a033f0bd5407
Sha512 f16cff7274bc2307b5032b5c20eb7ff401d5c17dd721137afd9ee86ac02231f3b233fbdb9797a88022971aa750a22086a70895e881800e4a8ebbe8710880b4c7
SSDeep 12288:i0OTMfw9E5IZJ+j7Ee9O7NcqBswugRV9tOxgKXYEtz69mskoUqxZWdCJkGmD:vfwJ+0RN3T99CXXv69JkYk5D
TLSH 17F412682500EB1BDC6597B81A71E67D033E5DDEE410D2266EE87CFBBAB9F001D50683
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
MatrixOperations.Forms.MainForm.resources
MatrixOperations.Properties.Resources.resources
Sort1
[NBF]root.Data
Thinking
[NBF]root.Data
[NBF]root.Data-preview.png
Thinking_Spinner
[NBF]root.Data
[NBF]root.Data-preview.png
Xokw
[NBF]root.Data
[NBF]root.Data-preview.png
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: ifDC.pdb
Module Name
ifDC.exe
Full Name
ifDC.exe
EntryPoint
System.Void MatrixOperations.Program::Main()
Scope Name
ifDC.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
ifDC
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
158
Main Method
System.Void MatrixOperations.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void MatrixOperations.Forms.MenuForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Module Name
ifDC.exe
Full Name
ifDC.exe
EntryPoint
System.Void MatrixOperations.Program::Main()
Scope Name
ifDC.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
ifDC
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
158
Main Method
System.Void MatrixOperations.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void MatrixOperations.Forms.MenuForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
MatrixOperations.Forms.MainForm.resources
MatrixOperations.Properties.Resources.resources
Sort1
[NBF]root.Data
Thinking
[NBF]root.Data
[NBF]root.Data-preview.png
Thinking_Spinner
[NBF]root.Data
[NBF]root.Data-preview.png
Xokw
[NBF]root.Data
[NBF]root.Data-preview.png
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙