Suspect
PE Executable
MD5: 4ae7fa0777d1d79d3ecb39c3b709189d
Size: 5.35 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Very low
| MD5 | 4ae7fa0777d1d79d3ecb39c3b709189d |
| Sha1 | acb20c0c56da6085bc9508bd9fa6ee25d6ef92df |
| Sha256 | 4f831bfdd5b3ab7f4194b6fd391cac71b70ba7ced3489eb2bdf78170eb1214e9 |
| Sha384 | 3e891f4ed11972a50530f3ec2a239569be29e27b83f540e5e2076e75e8491a3f60ac07dd437d64f19b920843a2c96210 |
| Sha512 | 02c5b4f1d9f6da80991a97a44b24935b4e48ff957eb886cf1b3e62581dc01528b5b2c0e49d16565fe662e4b7a257ab0a7359b907d75b13b8e7e6ccaaeb0d7729 |
| SSDeep | 49152:uQHlEQpMxabpmQb6FEPcSUu0Juw5y5SfRfPfoTov7SjZszqg/3wwsIRF16Z0O: |
| TLSH | 4F36DC383BEAD0197273EE564AD474A7A95FB7B37B03944E206103464633941EEE2D3E |
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | built_crypted.exe |
| Full Name | built_crypted.exe |
| EntryPoint | System.Void ObfuscatedStub.Runner::Main() |
| Scope Name | built_crypted.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | built_crypted |
| Assembly Version | 0.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 16 |
| Main Method | System.Void ObfuscatedStub.Runner::Main() |
| Main IL Instruction Count | 87 |
| Main IL | |
| Module Name | built_crypted.exe |
| Full Name | built_crypted.exe |
| EntryPoint | System.Void ObfuscatedStub.Runner::Main() |
| Scope Name | built_crypted.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | built_crypted |
| Assembly Version | 0.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 16 |
| Main Method | System.Void ObfuscatedStub.Runner::Main() |
| Main IL Instruction Count | 87 |
| Main IL | |