Suspect
PE Executable
MD5: 42b0a47c775eb6c442c3d5d9a2a8b090
Size: 1.63 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Low
| MD5 | 42b0a47c775eb6c442c3d5d9a2a8b090 |
| Sha1 | d943c0ed9b035d62640b46b9a8f1ece319e79f31 |
| Sha256 | 61db9f343f29b3e55dfcbce369adc446c09129c4b468619775bf81e0a92680f0 |
| Sha384 | cbf83397ab70c99824277553249bb0b3457aefb5a6250ddf0fdc41c45d6cfd86fc053577ddb717944421d096cc5b86e9 |
| Sha512 | ee298cf2e25c721447c3711cd85054e47cfe0f6e0c4340192aed1e0c5a8ddfd00ee0f833c795931dc4b393092d4f0a720b49c3f9f826ba9681b2aa814ffa26f0 |
| SSDeep | 24576:jS+JEfJhZ8j53sY1jCeqm6qv80MaooQajSMpHYWOkEfW5EQJZrUVvsgMYHQgdUUo:W+a5csqCeq08moPajSQY5HYryHACWbf |
| TLSH | 437512242FD95A40E5FA4AB42D60535145B47F42B817CFBEB2C37048CA76EC6DF31AA2 |
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual C++ v6.0 DLLMicrosoft Visual Studio .NET
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | Build.exe |
| Full Name | Build.exe |
| EntryPoint | System.Void Client.Program::Main() |
| Scope Name | Build.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Build |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.6.1 |
| Total Strings | 484 |
| Main Method | System.Void Client.Program::Main() |
| Main IL Instruction Count | 20 |
| Main IL | |
| Module Name | Build.exe |
| Full Name | Build.exe |
| EntryPoint | System.Void Client.Program::Main() |
| Scope Name | Build.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Build |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.6.1 |
| Total Strings | 484 |
| Main Method | System.Void Client.Program::Main() |
| Main IL Instruction Count | 20 |
| Main IL | |
No malware configuration was found at this point.
You must be signed in to view YARA rules.