Suspicious
Suspect

183b06f7a82543a77dba6ef0fcc4d759

Share on LinkedIn
Print
PE Executable
MD5: 183b06f7a82543a77dba6ef0fcc4d759
Size: 79.87 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 183b06f7a82543a77dba6ef0fcc4d759
Sha1 81ccbbf7b978388071dee52384120ae4df4b2b84
Sha256 6932f169761f4ba8fbb584c5dfaff2bbaa7a1108c4e0175afdf2acac6feeeacd
Sha384 ecdd06f339c70adb4688be7d1aa2cbf9300b2aabe885b3b3ee0aa1bdb16aabd3bb305583839a422fd400766956605f76
Sha512 41c19aea23adc06c48c3824248aad8f737ec53815dcc3368209fd5d464c855e1d053443dbc3592fcdaadb325fd74d4f62e19bb995a506105568fa7a999094974
SSDeep 1536:so+GU/PDpeS5wpOk3JCK6pFoeXG6fOpd/9nEh9TGPJDRM:XQwpOk5CK6JO/9ESPJDm
TLSH E4733B4877F54612D1BF0DB5897292221B36FC036A26F76D09D174AA5FB36C08A09FB2
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
183b06f7a82543a77dba6ef0fcc4d759
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0001
ID:0
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
Stub.exe
Full Name
Stub.exe
EntryPoint
System.Void Lime.StartNow::main()
Scope Name
Stub.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v2.0.50727
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Stub
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
692
Main Method
System.Void Lime.StartNow::main()
Main IL Instruction Count
4
Main IL 
nop <null>
call System.Void Lime.Core::eroc()
nop <null>
ret <null>
Module Name
Stub.exe
Full Name
Stub.exe
EntryPoint
System.Void Lime.StartNow::main()
Scope Name
Stub.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v2.0.50727
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Stub
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
692
Main Method
System.Void Lime.StartNow::main()
Main IL Instruction Count
4
Main IL 
nop <null>
call System.Void Lime.Core::eroc()
nop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙