Deep Malware Analysis of f224809016c45dcdc337987cc69620ea | md5: f224809016c45dcdc337987cc69620ea | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.47

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Medium

MD5	f224809016c45dcdc337987cc69620ea
Sha1	51b7d68ad5a70efe1c9f9b4e4475a9d286e673a0
Sha256	851777ba5b93dbcb9663559525e069ca084e7e5a5c5111d2a6798bb065b82fc9
Sha384	f769acfccbd974f6a3ffb4afeec8a863882c699a0cbdd8adfbe5a59cfa75d43d0d71ce24955f7e621cb732be2fa409a7
Sha512	4f689a7410a1ba512129ac5c4f4b50d8db8be296ebce79b3187b71f2dfb3496e1e7846fd0dc194886210466e912f947bbb7120529f43feed08646ef3f0dc646e
SSDeep	12288:AJf7P8QqFkNopMI+0XxJW2006aZxLzF0Umt+CziSb9K:AJf7Px0kNL0BbjXxd0LtLeSY
TLSH	54E401142BAEDF21D5E25BF40A70E2B513B49D4DA810E2078FEA7CDB307AF551949B83

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: rruv.pdb
Module Name	rruv.exe
Full Name	rruv.exe
EntryPoint	System.Void SpaceCalculator.Program::Main()
Scope Name	rruv.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	rruv
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	414
Main Method	System.Void SpaceCalculator.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void SpaceCalculator.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`