Suspect
PE Executable
MD5: 2e61670bc9fd8d34da93ca4c4b840d81
Size: 7.09 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Low
| MD5 | 2e61670bc9fd8d34da93ca4c4b840d81 |
| Sha1 | cc02d9e4c615fb5396b514aed216d47b65f6c91c |
| Sha256 | 9d20c976d601dae7c9224a726ae88a97508ecc9d589cad3ea322cd6379fa0cbd |
| Sha384 | d69e967bc8ce56630b1f9c4c6e333f358b0a63841cc5b6edf0c20769f7eb3807a1bf832c40d74582e879a02f1778435e |
| Sha512 | 4ed8d0182506dd45c4ee8cee99cfff30fdc21926112ca25c68e757abe23c3213233dade6596dfadb9cf91365ac688644a19876f09b4a2b4d3cf44ca54564d9c8 |
| SSDeep | 49152:xn+Q73U/GPATFPXIttnQOOMVfYRuCsirEQdTrovV3z/777nQ:nWOOMVwACsir |
| TLSH | F466069312ECFEDAD27A1679F33343E0DAAEDC19C250E24E16907956387D60379063DA |
PeID
HQR data fileMicrosoft Visual C++ DLLMicrosoft Visual C++ v6.0
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Module Name | System.Windows.Forms.dll |
| Full Name | System.Windows.Forms.dll |
| Scope Name | System.Windows.Forms.dll |
| Scope Type | ModuleDef |
| Kind | Dll |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | System.Windows.Forms |
| Assembly Version | 9.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | True |
| PublicKey Token | b77a5c561934e089 |
| Target Framework | .NETCoreApp,Version=v9.0 |
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: System.Windows.Forms.ni.pdb |
| Total Strings | 6002 |
| Main Method | Not found or no body |