Suspect
3b52411202288830c092ad8296c4e07c
PE Executable
MD5: 3b52411202288830c092ad8296c4e07c
Size: 78.85 KB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Low
| MD5 | 3b52411202288830c092ad8296c4e07c |
| Sha1 | fe58ec3013e5202861e6949e10ddb2eeeb3f4019 |
| Sha256 | 88821243a9e1eb2a094809552693af8a35f1cb67504d78b2f300091e4d0bc89f |
| Sha384 | 81ddeb52c96b4ba9f916c6dea694b0f9eac321bd87f217d4240f9b5c09882690fc7d5fee224b96675894925a25862c05 |
| Sha512 | 437490b3a842995cc286c3573410aa6d8f784a698de8ffa38680c348ebd211785f0908a86a8143688d3d10e36df6bdca00a9b916bbb76b1156fde7c5f86836a0 |
| SSDeep | 1536:7LfrGskjToj6C2NyHuDQ0ubv/ewJVXLTyL0oBb2HWtp1xps2x:3TI0a9DQ7bdJJ3yL0oBb2HWL1xx |
| TLSH | 0673C36973FC528EF5AF1B7EA8F013D18BB9FD233102D25E564950956821BC96E00BB3 |
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
1| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | bit77.exe |
| Full Name | bit77.exe |
| EntryPoint | System.Void sku5.Program::<Main>(System.String[]) |
| Scope Name | bit77.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | bit77 |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.6.2 |
| Total Strings | 375 |
| Main Method | System.Void sku5.Program::<Main>(System.String[]) |
| Main IL Instruction Count | 7 |
| Main IL | |
| Module Name | bit77.exe |
| Full Name | bit77.exe |
| EntryPoint | System.Void sku5.Program::<Main>(System.String[]) |
| Scope Name | bit77.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | bit77 |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.6.2 |
| Total Strings | 375 |
| Main Method | System.Void sku5.Program::<Main>(System.String[]) |
| Main IL Instruction Count | 7 |
| Main IL | |
No malware configuration was found at this point.
You must be signed in to view YARA rules.