Suspect
46ca2ca86cf7d396440eddc802eb2b1c
PE Executable
MD5: 46ca2ca86cf7d396440eddc802eb2b1c
Size: 802.3 KB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Very low
| MD5 | 46ca2ca86cf7d396440eddc802eb2b1c |
| Sha1 | 663cafa216434ba64947bfdd5f086341361e02a5 |
| Sha256 | eb94e07697701e5ab73cce951a41e42d8a7dec771934961045643031fc720962 |
| Sha384 | bdca020ca002301e2369324e42d0b028bfef7f3d2c93befc2b482a32bfa11ab09fe942a07950d46b5711ce95592e2882 |
| Sha512 | 951883859353c611f6401f3c08d7cf4cdbd6ea42b318f3540f6295359ff502c71a046de551ad4a1a6ec5847f78ba8146a951b706be2db5c2ab3c1630b9e31585 |
| SSDeep | 12288:kMrXz6tFg3kJWynQJViOlDN5Wxh6NUUsWgJDx6mNyrv+Q+Il9lVESh:dz/k4ynGViOlJ5iidsC/v+Ql7lZ |
| TLSH | FA05025132D9EB06C0B74BF50C70E3B513752E997522E30A8EE6ACDF7C3A702194A697 |
PeID
Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: C:\Users\Administrator\Desktop\Client\Temp\UqbyukkxFm\src\obj\Debug\aaJf.pdb |
| Module Name | aaJf.exe |
| Full Name | aaJf.exe |
| EntryPoint | System.Void MarcarConsulta.Program::Main() |
| Scope Name | aaJf.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | aaJf |
| Assembly Version | 0.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Total Strings | 676 |
| Main Method | System.Void MarcarConsulta.Program::Main() |
| Main IL Instruction Count | 10 |
| Main IL | |
| Module Name | aaJf.exe |
| Full Name | aaJf.exe |
| EntryPoint | System.Void MarcarConsulta.Program::Main() |
| Scope Name | aaJf.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | aaJf |
| Assembly Version | 0.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Total Strings | 676 |
| Main Method | System.Void MarcarConsulta.Program::Main() |
| Main IL Instruction Count | 10 |
| Main IL | |
No malware configuration was found at this point.
You must be signed in to view YARA rules.