Suspicious
Suspect

fde039bcbf98330a15d480b839768a57

PE Executable
MD5: fde039bcbf98330a15d480b839768a57
Size: 780.8 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 fde039bcbf98330a15d480b839768a57
Sha1 a2364311d37e4bd3edb87487c0a4972df96d04fb
Sha256 e1f829fbc77d8e8fae1e9d80b813602a97bd0b9bb622ed743d24580d2bdad892
Sha384 60f7c90572f28192342ae0c1ff3ecb2da87759ed9c4d37e4cfa378ddeb04087a013bd13a0c9d84fe5e681e0196567053
Sha512 fefc671eb839ae0c9d4f5ac03bc08bb2308d7a3f821f11389bddd86846f2b9a43b6a3e35ec3ba1214c1262daa570d8ea97209fceb5ae94efd2a1967426cdfe81
SSDeep 12288:PGp+VXrbOe080A41clW8K4224r1Plo8/DPv1t1xg4M8PWmHvQnkLhEAE:PW27bHn0A414NiSIDVtvg4XenaEAE
TLSH 69F401192366E902E1E25FF04831E7B007B8BD4EAD21D3079EE6ECEF7835B506955392
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
fde039bcbf98330a15d480b839768a57
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
HTMLValidator.Forms.MainForm.resources
HTMLValidator.Properties.Resources.resources
XBfR
[NBF]root.Data
[NBF]root.Data-preview.png
dr
[NBF]root.Data
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: LvWF.pdb
Module Name
LvWF.exe
Full Name
LvWF.exe
EntryPoint
System.Void HTMLValidator.Program::Main()
Scope Name
LvWF.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
LvWF
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
364
Main Method
System.Void HTMLValidator.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void HTMLValidator.Forms.MainForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Module Name
LvWF.exe
Full Name
LvWF.exe
EntryPoint
System.Void HTMLValidator.Program::Main()
Scope Name
LvWF.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
LvWF
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
364
Main Method
System.Void HTMLValidator.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void HTMLValidator.Forms.MainForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
fde039bcbf98330a15d480b839768a57
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
HTMLValidator.Forms.MainForm.resources
HTMLValidator.Properties.Resources.resources
XBfR
[NBF]root.Data
[NBF]root.Data-preview.png
dr
[NBF]root.Data
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙