Suspicious
Suspect

1f06fb3faad48d1025c8300c7006bbea

Share on LinkedIn
Print
PE Executable
MD5: 1f06fb3faad48d1025c8300c7006bbea
Size: 32.77 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 1f06fb3faad48d1025c8300c7006bbea
Sha1 dae0212dee35e8820b91875cf9c2b81ece70b987
Sha256 4ccb5fdf8a0d26c714c0e7eb7d3148a3167c25045540885b3cb2cabdaf315f32
Sha384 2685f8f7bbccdf4fb5444a3cbf2c0625a2d4f2080cd8c80b3988ae3a133eb455f5c1889a61c730e2880480ae4a6e8d8e
Sha512 f83cbb679287122fdc765c9533ad74498f70864372c41ff80a4a21f2e9b95a316951a55cae0d314c70dc284bfbaf2f4e322579122e3ae856b8b013dd96c627b2
SSDeep 384:ECbP3tSX6vBq7lazgEQkvQqDpy5Q1Q0YtQWTItebrOFeqzCNd:xS6vBqMzmkI8p369rfd
TLSH 3AE21A4777B58115C2ED56F88DB3132047B2D3838532EB6F9CEC44DA8BA37E54242AE9
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Module Name
Client.exe
Full Name
Client.exe
EntryPoint
System.Void Lime.Program::Main()
Scope Name
Client.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v2.0.50727
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Client
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
167
Main Method
System.Void Lime.Program::Main()
Main IL Instruction Count
2
Main IL
call System.Void Lime.Program::Start()
ret <null>
Info
PE Detect: PeReader OK (file layout)
Module Name
Client.exe
Full Name
Client.exe
EntryPoint
System.Void Lime.Program::Main()
Scope Name
Client.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v2.0.50727
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Client
Assembly Version
0.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
<null>
Total Strings
167
Main Method
System.Void Lime.Program::Main()
Main IL Instruction Count
2
Main IL
call System.Void Lime.Program::Start()
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙