Deep Malware Analysis of 06c1040968b2adbdf497ff412a7aa510 | md5: 06c1040968b2adbdf497ff412a7aa510 | Executable | PE (Portable Executable) | Win 32 Exe | x86 | .Net | SOS: 0.14

PE Executable

MD5: 06c1040968b2adbdf497ff412a7aa510

Size: 1.05 MB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Very low

MD5	06c1040968b2adbdf497ff412a7aa510
Sha1	5e3ef5e8460f21764472a70eb9e244ee6421cd5a
Sha256	ab134fddf98394f14de58cedce0a2ab543cacfde2c2a52c8080e4dbc8d058da1
Sha384	1b9decad8eb69294ed0c9d270cbeaaa9f8c2f50f54c81dcb4b2262f4a2bcc44f8019dc7b28a4f8b43beff65461e5f614
Sha512	c0d3e3d5b01e08b7a270d70c461a980c6cd9b8e3d2eba7fdb980399fa4363d09a70126b32a5da17f306e48d5a36fb70ba49edf99e6d743285ae778d11eca5b1b
SSDeep	24576:9s9IxVb6geC1dMjflF8KCLfPVYSu1Foc1G:pxl6geEdMTIVYSujs
TLSH	01256B9D3650B1DFC85BC572CAA89C74EB607C7A531BC203A09719AEB90DA97DF140F2

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Module Name	kaNf.exe
Full Name	kaNf.exe
EntryPoint	System.Void StormCast.Program::Main()
Scope Name	kaNf.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	kaNf
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	1037
Main Method	System.Void StormCast.Program::Main()
Main IL Instruction Count	21
Main IL	call System.Void StormCast.Program::‏‮‏⁬⁬‮‬⁬‪‎‎‫‮‍⁮⁫‭‫‪‪⁬‎⁯‪⁯⁯⁯⁪‫‪⁮‌‏⁯‬‭‏‮() ldc.i4 1050536294 ldc.i4 920058994 xor <null> dup <null> stloc.0 <null> ldc.i4.3 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_0046: ret ldc.i4.0 <null> call System.Void StormCast.Program::‎‭‍‫⁫⁮‫⁯⁮‬⁪‎‏⁬‫⁫‫‪‎‌⁮‌⁯⁮‍‎⁯⁪‏‭‭⁬⁯‎‍‬‪‮(System.Boolean) newobj System.Void StormCast.StrategicForm33::.ctor() call System.Void StormCast.Program::⁭‫⁮⁬⁭‏‍‎‎‬‏‪⁯‏‌‪⁯⁯⁮⁭⁯‫‎⁫⁭‭‎‮⁬⁯‮⁯‮‏‍‍‪‮‮(System.Windows.Forms.Form) ldloc.0 <null> ldc.i4 -1916676411 mul <null> ldc.i4 230677616 xor <null> br.s IL_000A: ldc.i4 920058994 ret <null>
Module Name	kaNf.exe
Full Name	kaNf.exe
EntryPoint	System.Void StormCast.Program::Main()
Scope Name	kaNf.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	kaNf
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	1037
Main Method	System.Void StormCast.Program::Main()
Main IL Instruction Count	21
Main IL	call System.Void StormCast.Program::‏‮‏⁬⁬‮‬⁬‪‎‎‫‮‍⁮⁫‭‫‪‪⁬‎⁯‪⁯⁯⁯⁪‫‪⁮‌‏⁯‬‭‏‮() ldc.i4 1050536294 ldc.i4 920058994 xor <null> dup <null> stloc.0 <null> ldc.i4.3 <null> rem.un <null> switch dnlib.DotNet.Emit.Instruction[] br.s IL_0046: ret ldc.i4.0 <null> call System.Void StormCast.Program::‎‭‍‫⁫⁮‫⁯⁮‬⁪‎‏⁬‫⁫‫‪‎‌⁮‌⁯⁮‍‎⁯⁪‏‭‭⁬⁯‎‍‬‪‮(System.Boolean) newobj System.Void StormCast.StrategicForm33::.ctor() call System.Void StormCast.Program::⁭‫⁮⁬⁭‏‍‎‎‬‏‪⁯‏‌‪⁯⁯⁮⁭⁯‫‎⁫⁭‭‎‮⁬⁯‮⁯‮‏‍‍‪‮‮(System.Windows.Forms.Form) ldloc.0 <null> ldc.i4 -1916676411 mul <null> ldc.i4 230677616 xor <null> br.s IL_000A: ldc.i4 920058994 ret <null>

Embedded Resources UNKNWOWNsuspect

2huhuhuhu

Suspicious Type Names (1-2 chars) UNKNWOWN

0huhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

Embedded Resources UNKNWOWNsuspect

2huhuhuhu

06c1040968b2adbdf497ff412a7aa510

Suspicious Type Names (1-2 chars) UNKNWOWN

0huhuhuhu

06c1040968b2adbdf497ff412a7aa510

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.