Suspicious
Suspect

PE Executable
MD5: f9846ade8b1049ed5c18929e26c2f76d
Size: 701.44 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 f9846ade8b1049ed5c18929e26c2f76d
Sha1 411391f824b10c4f76bb11c0f457a209ef5846b5
Sha256 af1dac32cb850795edce8871424e105668dd55e7cab6d1087a1d484e95f5ce83
Sha384 452cdff552791736706f005cccdd8845819d4abc57e14e76da96e7735598b5f6795dacebf0b4e208871f4839f4bb54c4
Sha512 c56f2a855dc8d1ec03a8a54a3f28aca84a519f9aa30dbf7d45802c8c4523bc71734e6de50b9c67348d1c3c19e44753a56d6f05d28b363e3ee6422c07e534d6e1
SSDeep 12288:LRppu9HupvSrAQVo1c3dSMjlKOveTk2kAmDqyc1L3oN+o1eBop+8iwSnA9:NeupSrAQVo1GdSqJeSq7to1vSnA9
TLSH D0E412A4050BDA23D8A107F499B0F3F873696EEDB811D7178ED82CDB7C3A71465913A2
f9846ade8b1049ed5c18929e26c2f76d
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
NumberGuess.MainForm.resources
NumberGuess.Properties.Resources.resources
Xdyw
[NBF]root.Data
[NBF]root.Data-preview.png
gap
[NBF]root.Data
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: lRNE.pdb
Module Name
lRNE.exe
Full Name
lRNE.exe
EntryPoint
System.Void NumberGuess.Program::Main()
Scope Name
lRNE.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
lRNE
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
102
Main Method
System.Void NumberGuess.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void NumberGuess.MainForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
f9846ade8b1049ed5c18929e26c2f76d
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
NumberGuess.MainForm.resources
NumberGuess.Properties.Resources.resources
Xdyw
[NBF]root.Data
[NBF]root.Data-preview.png
gap
[NBF]root.Data
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙