Suspect
PE Executable
MD5: 30995f17fe5ed41bbf6669eb32ad628e
Size: 6.72 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Very high
| MD5 | 30995f17fe5ed41bbf6669eb32ad628e |
| Sha1 | 276a858e52b5960666252855e79a7d1a06720e1b |
| Sha256 | a6744e31af1e187ad89534ca7c94d9a85fd2cb5106db2a7f81d5540fdbf70cbb |
| Sha384 | 2a0f6bebe2ffd07fb78af62e33853b40c5ffa879f468e8b0886e965bf83d3941f0865dd17defb0dd47c2482a3a9aff64 |
| Sha512 | 8650203dca803902f94fee3d931ded29e5191ba16eb21c219ee5f8c15441432c500929244f8974d661cb4ae4dd799abe5bf12a2a28b7ff772dc32f8429a583c5 |
| SSDeep | 98304:cXmJgFfy7AFYNkivpJu1OBOsKv1BCBoBsRDwe6M3cahCExLmzo:mGVsFYNVh+TsOWDRMZgc0xL5 |
| TLSH | 9166F1B867F0A9B2C7E506B5CE3123E15235FE07FB8231BE9A8D93104973758D9324A5 |
PeID
Microsoft Visual C++ DLLMicrosoft Visual C++ v6.0
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_dd568118.bin (64 bytes) |
| Module Name | HIDDEN ULTIMATE 2.0.exe |
| Full Name | HIDDEN ULTIMATE 2.0.exe |
| EntryPoint | System.Void くせままんらせけひひさそみらこゆそ.かぬふめつゆるも::ろてそれしやねか() |
| Scope Name | HIDDEN ULTIMATE 2.0.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | HIDDEN ULTIMATE 2.0 |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.7.2 |
| Total Strings | 719 |
| Main Method | System.Void くせままんらせけひひさそみらこゆそ.かぬふめつゆるも::ろてそれしやねか() |
| Main IL Instruction Count | 0 |
| Main IL | — |