Suspect
1f06fb3faad48d1025c8300c7006bbea
PE Executable
MD5: 1f06fb3faad48d1025c8300c7006bbea
Size: 32.77 KB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Low
| MD5 | 1f06fb3faad48d1025c8300c7006bbea |
| Sha1 | dae0212dee35e8820b91875cf9c2b81ece70b987 |
| Sha256 | 4ccb5fdf8a0d26c714c0e7eb7d3148a3167c25045540885b3cb2cabdaf315f32 |
| Sha384 | 2685f8f7bbccdf4fb5444a3cbf2c0625a2d4f2080cd8c80b3988ae3a133eb455f5c1889a61c730e2880480ae4a6e8d8e |
| Sha512 | f83cbb679287122fdc765c9533ad74498f70864372c41ff80a4a21f2e9b95a316951a55cae0d314c70dc284bfbaf2f4e322579122e3ae856b8b013dd96c627b2 |
| SSDeep | 384:ECbP3tSX6vBq7lazgEQkvQqDpy5Q1Q0YtQWTItebrOFeqzCNd:xS6vBqMzmkI8p369rfd |
| TLSH | 3AE21A4777B58115C2ED56F88DB3132047B2D3838532EB6F9CEC44DA8BA37E54242AE9 |
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
1| Name | Value |
|---|---|
| Module Name | Client.exe |
| Full Name | Client.exe |
| EntryPoint | System.Void Lime.Program::Main() |
| Scope Name | Client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v2.0.50727 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Client |
| Assembly Version | 0.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 167 |
| Main Method | System.Void Lime.Program::Main() |
| Main IL Instruction Count | 2 |
| Main IL | |
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | Client.exe |
| Full Name | Client.exe |
| EntryPoint | System.Void Lime.Program::Main() |
| Scope Name | Client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v2.0.50727 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Client |
| Assembly Version | 0.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 167 |
| Main Method | System.Void Lime.Program::Main() |
| Main IL Instruction Count | 2 |
| Main IL | |
No malware configuration was found at this point.
You must be signed in to view YARA rules.