092459b6cabf160c64dad016594d54e9

PE Executable

MD5: 092459b6cabf160c64dad016594d54e9

Size: 1.67 MB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Medium

MD5	092459b6cabf160c64dad016594d54e9
Sha1	ff277db1cf56be1d67e8d7ed8a16f9fb0de43891
Sha256	d886a422b288e22fdab3b66b4f91d6589700e639900e1bf04b2fb87af92f61e9
Sha384	d1b143a71d96fef489bcdfe48711367425d648c5fa3e662b234a720a317849998d58a8646074c88131c3b20aff757998
Sha512	db2ced61eb949186a8f1819f935f742a0240efd006a6d25dd13423670d16bd22abbfd3c2d73f8bb2ddcd52e15642c68c220c6eb1734c9f11d1e4b1777037233f
SSDeep	24576:cuFhYFgd+PRODKFWAJ+D/RU1381jGKxF3sYaGfAX8vcZWtP6cQ2Du3kVz6O7:BLYFKI6jRUsxmKIZW5q3kVeO
TLSH	1F75CF2215F0C875F4B2EAB4C8B3E1F545DA7C12E439C59B9D103CAEBE70B4299273A5

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLLMicrosoft Visual Studio .NETUPolyX 0.3 -> delikon

STICH beta

No STICH Path has been generated for this analysis yet.

5 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 4img 1

Name	Value
Module Name	Wave Browser.exe
Full Name	Wave Browser.exe
EntryPoint	System.Void InstallerWpfApp.App::Main()
Scope Name	Wave Browser.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Wave Browser
Assembly Version	1.5.24.16
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	331
Main Method	System.Void InstallerWpfApp.App::Main()
Main IL Instruction Count	6
Main IL	`newobj System.Void InstallerWpfApp.App::.ctor() dup <null> callvirt System.Void InstallerWpfApp.App::InitializeComponent() callvirt System.Int32 System.Windows.Application::Run() pop <null> ret <null>`
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x196600 size 10416 bytes
Info	PDB Path: C:\code\chr-wpf-installer\InstallerWpfApp\obj\VertRelease\Wave Browser.pdb
Module Name	Wave Browser.exe
Full Name	Wave Browser.exe
EntryPoint	System.Void InstallerWpfApp.App::Main()
Scope Name	Wave Browser.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Wave Browser
Assembly Version	1.5.24.16
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.0
Total Strings	331
Main Method	System.Void InstallerWpfApp.App::Main()
Main IL Instruction Count	6
Main IL	`newobj System.Void InstallerWpfApp.App::.ctor() dup <null> callvirt System.Void InstallerWpfApp.App::InitializeComponent() callvirt System.Int32 System.Windows.Application::Run() pop <null> ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.