Deep Malware Analysis of 1c9a2a9550f23cb248010b04207bca9c | md5: 1c9a2a9550f23cb248010b04207bca9c | .Net | PE (Portable Executable) | SOS: 0.24 | Executable | Managed .NET | PE File Layout | Win 32 Exe | x86 | PDB Path

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	1c9a2a9550f23cb248010b04207bca9c
Sha1	38ab98356543f40712fe160c1d895c9b39fd9eef
Sha256	cd2923950dfdeb9f34ee2da56bee4dc602431e3ce04e03476ea2c5aa54e13ae9
Sha384	25ae20444fdc5067783ff62494e8d22fd97689064d1099efddf8d51892ab0f5eae73b9a7648e15d5028dcdb60a9cd43f
Sha512	4ad9cd32c61d684514b8f113286ba8cb9ae5be31a9008e8a4d9ed9ce68dd265ece5917d401a575cd5f53d6a1a8929c41f8a7418646e83a241e0de99541e2859a
SSDeep	12288:0ql2ZmSpGdCKwnzFy47hBj3GBYKttBrkhl9gBxpC6POp7OxS2gJr7slgzUU1Xn6U:ZSpUCFRy46YYSCWcgpA6UWn7n9vlww
TLSH	6835227C964AC802E88607710AF5E37632386EDCB512C2B3DBFDFDD77435A6A2859142

PeID

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

STICH beta

No STICH Path has been generated for this analysis yet.

4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 2

Name	Value
Module Name	lAkt.exe
Full Name	lAkt.exe
EntryPoint	System.Void SynthStudio.Program::Main()
Scope Name	lAkt.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	lAkt
Assembly Version	8.4.2.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.7.2
Total Strings	140
Main Method	System.Void SynthStudio.Program::Main()
Main IL Instruction Count	6
Main IL	`call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void SynthStudio.UI.MasterStudioDesk::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>`
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: C:\Users\Administrator\Desktop\Client\Temp\imsjYbGpcE\src\obj\Debug\lAkt.pdb
Module Name	lAkt.exe
Full Name	lAkt.exe
EntryPoint	System.Void SynthStudio.Program::Main()
Scope Name	lAkt.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	lAkt
Assembly Version	8.4.2.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.7.2
Total Strings	140
Main Method	System.Void SynthStudio.Program::Main()
Main IL Instruction Count	6
Main IL	`call System.Void System.Windows.Forms.Application::EnableVisualStyles() ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) newobj System.Void SynthStudio.UI.MasterStudioDesk::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null>`