56cbe32a7c1693b745e593d45d561516

PE Executable

MD5: 56cbe32a7c1693b745e593d45d561516

Size: 811.52 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	56cbe32a7c1693b745e593d45d561516
Sha1	4e40e05239c5bfbff6562c93208ff934cea40736
Sha256	4cbe69952f8dd01ce01fdb9c0675cc352733c41d02d86ef5d43bce4fe26561f3
Sha384	e2fa0ead38777213fb953244de138ff04de65146c8988f5e3dbf763db207bdbfc236c42cc00b298dfbd3c766b7fe97f3
Sha512	166a684ca15975b38880d45e0214f133abbd6808916eb859917d00bb2d307861658788273203b90a964b42c5a0d871125a9afdae4d8a7548609f5b65356a7c83
SSDeep	12288:H3X5xGLlMnnlwSvPPM/GdCEW6xxD2PmSZgozBZWZ25wsj6be6dR6JI3m:m5Ck+sza8jgqBZT50R6U
TLSH	F305F15476BDDA13C9B60B785D70F37423B52D8EB620D2478FE56CDB3822F9128582A3

STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	AVWm.exe
Full Name	AVWm.exe
EntryPoint	System.Void SemaphoreLine.Program::Main()
Scope Name	AVWm.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	AVWm
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	417
Main Method	System.Void SemaphoreLine.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void SemaphoreLine.Formlar.HatForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.