Malicious PE Executable analysis – 57d26f045da1

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Portable Executable file

Size

247.81 KB · 247,808 B

First seen

2026-07-03 07:16 · 3 months ago

Last seen

2026-07-03 07:16 · 3 months ago

Last analysis

2026-07-05 09:12 · 3 months ago

Hashes

MD5 fbfe4c2ffe4f4eba18c3c784bcd27528 Sha1 3efb2084f2eb98eff1ae58e497c27527d89192f9 Sha256 57d26f045da134f570eb745cee88057c0c3872d6aeab9477fc17ae46853e93c2 Sha384 21b1761c3860080034c1d7e24c543f6e0e3aaeed766b65bc96a098b38315a1c31ed1bea8faac399cfe472414c1e91481 Sha512 3b0975a58d9ec881b3819d5cf8a5c88dac1b2c88ec76a417d07a614ac60489397137f4f4332bf2866f6ba756b99a4a787596c433cc010f02f31966ae9955d686 SSDeep 3072:MCgpH9cd7O5ohSk60DOqRTjV6kjm4l2HLcGTlCyrq1e4QTlDgAhyZ6skoYmabM9K:MlF55lcjVQvTlKXyDe6sBCM9gQu TLSH F2347E0B776CCB32D57D5AB4B2CF070613F5B28A9E23E70AEE4916F41A873522D5214B

Detection

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Symbol obfuscation

Very low

1 malicious · 5 files

EXEfbfe4c2ffe4f4eba18c3c784bcd27528

Structure

BINResources

BIN.Net Resources

Name	Value
Module Name	Woayrvyhf.exe
Full Name	Woayrvyhf.exe
EntryPoint	System.Void GClass0::Main()
Scope Name	Woayrvyhf.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Woayrvyhf
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	50
Main Method	System.Void GClass0::Main()
Main IL Instruction Count	8
Main IL	`call System.Void Class7::kLjw4iIsCLsZtxc4lksN0j() newobj System.Void Class0::.ctor() call System.Byte[] Htholrzc.Properties.Uuohjwmnd::get_Oavynz() callvirt System.Void Class0::method_10(System.Byte[]) leave.s IL_0019: ret pop <null> leave.s IL_0019: ret ret <null>`
Module Name	Woayrvyhf.exe
Full Name	Woayrvyhf.exe
EntryPoint	System.Void GClass0::Main()
Scope Name	Woayrvyhf.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Woayrvyhf
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	50
Main Method	System.Void GClass0::Main()
Main IL Instruction Count	8
Main IL	`call System.Void Class7::kLjw4iIsCLsZtxc4lksN0j() newobj System.Void Class0::.ctor() call System.Byte[] Htholrzc.Properties.Uuohjwmnd::get_Oavynz() callvirt System.Void Class0::method_10(System.Byte[]) leave.s IL_0019: ret pop <null> leave.s IL_0019: ret ret <null>`