Suspicious
Suspect

1b622c451fcc9d83aad8bf45b1c42b5f

Share on LinkedIn
Print
PE Executable
MD5: 1b622c451fcc9d83aad8bf45b1c42b5f
Size: 95.23 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 1b622c451fcc9d83aad8bf45b1c42b5f
Sha1 2e70ac7f1bdfc2f9912448ee2b6c2c478bef3aab
Sha256 df4e36252bf8a2b1dee291bcaf9e0505246cacc1d1ea9db3494f30c8506ba0cb
Sha384 eb01ea2c7db4def68c01bd4cd3fc71ece423f2cad9add6a495d8bd3e070b24b6c08baee77bee1a426969086eb1510d8d
Sha512 df877ef862a83c54a397958742b17503c5938d1f585ae9f0aafcd21eaf8edace67229d089f1e638e57d97cf735819d17726edd6a1e266f42ff82882f5a8e1999
SSDeep 1536:UUNJD/HBZbszKu9AZp77r1jEwzGi1dD8DlgS:UUUzK4AZtHCi1dyy
TLSH 9993E94977E52524E0BF56F75471F2014E34B48B1612E39D98F219AA0B33AC44F8AFEB
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
1b622c451fcc9d83aad8bf45b1c42b5f
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.reloc
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
Stub.exe
Full Name
Stub.exe
EntryPoint
System.Void Stub.A::main()
Scope Name
Stub.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v2.0.50727
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Stub
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
1272
Main Method
System.Void Stub.A::main()
Main IL Instruction Count
25
Main IL 
nop <null>
ldc.i4.1 <null>
stsfld System.Boolean Stub.A::runx
ldnull <null>
ldftn System.Void Stub.A::timx_run()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stsfld System.Threading.Thread Stub.A::thx
ldsfld System.Threading.Thread Stub.A::thx
callvirt System.Void System.Threading.Thread::Start()
nop <null>
ldc.i4.1 <null>
stsfld System.Boolean Stub.A::runy
ldnull <null>
ldftn System.Void Stub.A::timy_run()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stsfld System.Threading.Thread Stub.A::thy
ldsfld System.Threading.Thread Stub.A::thy
callvirt System.Void System.Threading.Thread::Start()
nop <null>
call System.Void Stub.Fransesco::ko()
nop <null>
nop <null>
ret <null>
Module Name
Stub.exe
Full Name
Stub.exe
EntryPoint
System.Void Stub.A::main()
Scope Name
Stub.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v2.0.50727
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Stub
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
1272
Main Method
System.Void Stub.A::main()
Main IL Instruction Count
25
Main IL 
nop <null>
ldc.i4.1 <null>
stsfld System.Boolean Stub.A::runx
ldnull <null>
ldftn System.Void Stub.A::timx_run()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stsfld System.Threading.Thread Stub.A::thx
ldsfld System.Threading.Thread Stub.A::thx
callvirt System.Void System.Threading.Thread::Start()
nop <null>
ldc.i4.1 <null>
stsfld System.Boolean Stub.A::runy
ldnull <null>
ldftn System.Void Stub.A::timy_run()
newobj System.Void System.Threading.ThreadStart::.ctor(System.Object,System.IntPtr)
newobj System.Void System.Threading.Thread::.ctor(System.Threading.ThreadStart)
stsfld System.Threading.Thread Stub.A::thy
ldsfld System.Threading.Thread Stub.A::thy
callvirt System.Void System.Threading.Thread::Start()
nop <null>
call System.Void Stub.Fransesco::ko()
nop <null>
nop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙