Deep Malware Analysis of 1a92087582ec9c26c910c47855c7a6cb | md5: 1a92087582ec9c26c910c47855c7a6cb | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.16

PE Executable

MD5: 1a92087582ec9c26c910c47855c7a6cb

Size: 654.34 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Very low

MD5	1a92087582ec9c26c910c47855c7a6cb
Sha1	56c5b86f4f8b444b44dd15bbfaef84f2bd12da04
Sha256	189d8784d276bc194ddde44fdcccea3abcb9325ac8fc076cae20c9de46f0fcd8
Sha384	ef041b7a2845f83a3880c557fd860f376da7a396d7e173e35a4345b120227c29adda4e167bbf5a5dc218f9802fd9046a
Sha512	9a5a82fbc033ae708c04f321bbe855b00a2cc1d1074133b4a187cdcca8e8a1b323ee87e2afe2cf3e22ab7b1c191f2c76d8791c0f4c1b923eb483be7c9d5b35fa
SSDeep	12288:8MrXUyEmNI81tikTtdjSVxL8c3tqujyOgEbKJaBvLuNw1x:1HdNNb5+yODBBvLuG
TLSH	D6D4F15133D9EB01D4B65BF50930D370073A6ED9B422E31E8EEAACEB3D36B411A09657

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: C:\Users\Administrator\Desktop\Client\Temp\kjPhFLOIVi\src\obj\Debug\tDag.pdb
Module Name	tDag.exe
Full Name	tDag.exe
EntryPoint	System.Void MarcarConsulta.Program::Main()
Scope Name	tDag.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	tDag
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	676
Main Method	System.Void MarcarConsulta.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void MarcarConsulta.menu::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`
Module Name	tDag.exe
Full Name	tDag.exe
EntryPoint	System.Void MarcarConsulta.Program::Main()
Scope Name	tDag.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	tDag
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	676
Main Method	System.Void MarcarConsulta.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void MarcarConsulta.menu::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.