Suspect
PE Executable
MD5: 3ba983d7659198a8dd19799702e31b86
Size: 370.69 KB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Low
| MD5 | 3ba983d7659198a8dd19799702e31b86 |
| Sha1 | f94d36286661812ed4ae8e683811de6d77fd8b77 |
| Sha256 | 2821cdbbfa519f97445164d7b69f32a53f3fc034f09dfe138a6fd219aec6884b |
| Sha384 | a0176d82ad78fb26284f6bc02c6418204273b5912e7e3e544a07ae415d8f5ca3cf8708dbe47bed961406f2c99f01e740 |
| Sha512 | d59397f9a6b053867622baaedc445a5976651375fc9d82754642156b84f6bfb8cb5600f4026f44d87e941ee1d9e610473fab8204b70f24d63ad014c6dd6f9c79 |
| SSDeep | 6144:Q/SXBScYikzpfw4PFD1WNirSZkbyi1wzByP9GvbGF:3IbI47WNiGuwz8P91 |
| TLSH | 6C746B847F94CA22D86F07BCF4A24C1453B8D90BE457AB6F67C4E6E11CE331E888A557 |
PeID
Microsoft Visual C# / Basic .NET
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | Microsoft.Win32.TaskScheduler_protected.dll |
| Full Name | Microsoft.Win32.TaskScheduler_protected.dll |
| Scope Name | Microsoft.Win32.TaskScheduler_protected.dll |
| Scope Type | ModuleDef |
| Kind | Dll |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Microsoft.Win32.TaskScheduler |
| Assembly Version | 2.8.20.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5.2 |
| Total Strings | 30 |
| Main Method | Not found or no body |
| Module Name | Microsoft.Win32.TaskScheduler_protected.dll |
| Full Name | Microsoft.Win32.TaskScheduler_protected.dll |
| Scope Name | Microsoft.Win32.TaskScheduler_protected.dll |
| Scope Type | ModuleDef |
| Kind | Dll |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Microsoft.Win32.TaskScheduler |
| Assembly Version | 2.8.20.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5.2 |
| Total Strings | 30 |
| Main Method | Not found or no body |