Suspect
PE Executable
MD5: 5266f6562688337773309b62ce163b3f
Size: 1.6 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Low
| MD5 | 5266f6562688337773309b62ce163b3f |
| Sha1 | debc893826f0b4ba27097144e632c5d60fe4449e |
| Sha256 | 8d900fed9f2902c8bcba1c8db2f4434517219d24bc2a021226f52d344d06cbdb |
| Sha384 | 2413aef522925548b9270c3b5e91e9356a06c0c71610bfb47bf58f428aba3ae28d94c4dbd83f591bda3aca145f339c7e |
| Sha512 | 170767d024afae34759027d33fe53a07096bc11e4c39599c1488a3c25a2ebf928e23ef23142cf768bc7ca823ca750126eba13b7dd341bfff9a9daed4ac8b775d |
| SSDeep | 24576:Kn+JEfJhZ8j53sY1jCeqm6qv80MaooQajSMpHYWOkEfW5EQJZrUVvsgMYHQgdUUL:g+a5csqCeq08moPajSQY5HYryHACW52 |
| TLSH | C075123823D95B44F5FF5FB43864905155B4B702EC17CB9DB2C0618C8AB7B8AD732AA2 |
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual C++ v6.0 DLLMicrosoft Visual Studio .NET
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | confa7777.exe |
| Full Name | confa7777.exe |
| EntryPoint | System.Void Client.Program::Main() |
| Scope Name | confa7777.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | confa7777 |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.6.1 |
| Total Strings | 484 |
| Main Method | System.Void Client.Program::Main() |
| Main IL Instruction Count | 20 |
| Main IL | |
| Module Name | confa7777.exe |
| Full Name | confa7777.exe |
| EntryPoint | System.Void Client.Program::Main() |
| Scope Name | confa7777.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | confa7777 |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.6.1 |
| Total Strings | 484 |
| Main Method | System.Void Client.Program::Main() |
| Main IL Instruction Count | 20 |
| Main IL | |
No malware configuration was found at this point.
You must be signed in to view YARA rules.