Suspicious
Suspect

Share on LinkedIn
Print
PE Executable
MD5: 170ff632f45da6da24d1dca9407abd1c
Size: 355.84 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Very high
MD5 170ff632f45da6da24d1dca9407abd1c
Sha1 f29f9eec133930de992f85db75a12232db05b9a4
Sha256 3249cbb032d6aaf66c01aaddc48eab91417b1f22b97ddb659f2f5a5a5683bfb3
Sha384 1283ef0ce998925cc75bc68b7ce19c9afb162a959d90f9d84aa66bb81173d4517d10f848b9ea4cad86ab61f31e06dde2
Sha512 a426bb5d416452ca1fe1fdd76a8db83465c2b19769567f85ce56e29902f87299938f008b7cf76c8ca8f3570173b6096c39b7e5fb901054a6290bc5d979947f30
SSDeep 6144:9S6xTh9z07akxR3lAgdaYbMhafY/ggAxmw8u2Gg6rcnNqy+2Ws2P8H9uwQQNXpli:Y6xN9zvCN2gtANWwV6rcNZ+2WhP8Hg0+
TLSH 807412D437D4F9A2D29E57B98837234B27B5D8907A07DB939A8C2A8F1C103DA1C4DDD2
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
170ff632f45da6da24d1dca9407abd1c
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.reloc
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
STEINNNNOS&&
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
STEINNNNOS.exe
Full Name
STEINNNNOS.exe
EntryPoint 
System.Void A.ca7fb0e16293f43bfe85b05ed2cf2333f::cddab365b42792bb7828af965557acbcb(System.String[])
Scope Name
STEINNNNOS.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
STEINNNNOS
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
4
Main Method 
System.Void A.ca7fb0e16293f43bfe85b05ed2cf2333f::cddab365b42792bb7828af965557acbcb(System.String[])
Main IL Instruction Count
8
Main IL 
newobj System.Void A.ca7fb0e16293f43bfe85b05ed2cf2333f::.ctor()
ldc.i4.1 <null>
call System.String A.c66ba3b538e2c296a5c4a242d1bc08db5::c383edb8e678e22ba6718def92e65a673(System.Int32)
call System.Void A.ca7fb0e16293f43bfe85b05ed2cf2333f::ca381458ae87527e01a0271bfb6f66397(System.String)
leave.s IL_0015: ret
pop <null>
leave.s IL_0015: ret
ret <null>
Module Name
STEINNNNOS.exe
Full Name
STEINNNNOS.exe
EntryPoint 
System.Void A.ca7fb0e16293f43bfe85b05ed2cf2333f::cddab365b42792bb7828af965557acbcb(System.String[])
Scope Name
STEINNNNOS.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
STEINNNNOS
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
4
Main Method 
System.Void A.ca7fb0e16293f43bfe85b05ed2cf2333f::cddab365b42792bb7828af965557acbcb(System.String[])
Main IL Instruction Count
8
Main IL 
newobj System.Void A.ca7fb0e16293f43bfe85b05ed2cf2333f::.ctor()
ldc.i4.1 <null>
call System.String A.c66ba3b538e2c296a5c4a242d1bc08db5::c383edb8e678e22ba6718def92e65a673(System.Int32)
call System.Void A.ca7fb0e16293f43bfe85b05ed2cf2333f::ca381458ae87527e01a0271bfb6f66397(System.String)
leave.s IL_0015: ret
pop <null>
leave.s IL_0015: ret
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙