0709e53641829dc93945aece20e2da21

PE Executable

MD5: 0709e53641829dc93945aece20e2da21

Size: 858.62 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Medium

MD5	0709e53641829dc93945aece20e2da21
Sha1	13e07c20dc2e25f48cb91682f2d5f97b9e398148
Sha256	fa1d013f5d8f4833ca5e80b1987ce0908625fab234048fe16e293d5ccbb963fa
Sha384	d512c48206e77379b2ba3641c08da5e6c3b29d973c835ba761f543fcbe670e4f7b65ae3465efa9e77dce27f2aa93db73
Sha512	3df2e10081945085cdd1d00308c906b5a1a96484bc1c8866459038a191cdde63ae679fbc2cd514318ebef5234af575b295903161d48971136187cdef8598a120
SSDeep	12288:QX697n4P0onz5sVZ+vuE66oCKgQXws7toWAaD8uFYwR0Tex3DnFSA9KyR:VdEnqVzEx0w4D8uWwRuexkAXR
TLSH	52059B04221BDB23C65526B0C973E2F90374DD59ED32832F49E9BDB77F36EA0A4541A2

STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1

Name	Value
Module Name	wudt.exe
Full Name	wudt.exe
EntryPoint	System.Void FlaxRetting.Program::Main()
Scope Name	wudt.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	wudt
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	257
Main Method	System.Void FlaxRetting.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void FlaxRetting.FormHaupt::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`
Info	PE Detect: PeReader OK (file layout)

No malware configuration was found at this point.

You must be signed in to view YARA rules.