Suspicious
Suspect

fde039bcbf98330a15d480b839768a57

Share on LinkedIn
Print
PE Executable
MD5: fde039bcbf98330a15d480b839768a57
Size: 780.8 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 fde039bcbf98330a15d480b839768a57
Sha1 a2364311d37e4bd3edb87487c0a4972df96d04fb
Sha256 e1f829fbc77d8e8fae1e9d80b813602a97bd0b9bb622ed743d24580d2bdad892
Sha384 60f7c90572f28192342ae0c1ff3ecb2da87759ed9c4d37e4cfa378ddeb04087a013bd13a0c9d84fe5e681e0196567053
Sha512 fefc671eb839ae0c9d4f5ac03bc08bb2308d7a3f821f11389bddd86846f2b9a43b6a3e35ec3ba1214c1262daa570d8ea97209fceb5ae94efd2a1967426cdfe81
SSDeep 12288:PGp+VXrbOe080A41clW8K4224r1Plo8/DPv1t1xg4M8PWmHvQnkLhEAE:PW27bHn0A414NiSIDVtvg4XenaEAE
TLSH 69F401192366E902E1E25FF04831E7B007B8BD4EAD21D3079EE6ECEF7835B506955392
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
fde039bcbf98330a15d480b839768a57
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
HTMLValidator.Forms.MainForm.resources
HTMLValidator.Properties.Resources.resources
XBfR
[NBF]root.Data
[NBF]root.Data-preview.png
dr
[NBF]root.Data
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: LvWF.pdb
Module Name
LvWF.exe
Full Name
LvWF.exe
EntryPoint
System.Void HTMLValidator.Program::Main()
Scope Name
LvWF.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
LvWF
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
364
Main Method
System.Void HTMLValidator.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void HTMLValidator.Forms.MainForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Module Name
LvWF.exe
Full Name
LvWF.exe
EntryPoint
System.Void HTMLValidator.Program::Main()
Scope Name
LvWF.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
LvWF
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
364
Main Method
System.Void HTMLValidator.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void HTMLValidator.Forms.MainForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙