Suspect
PE Executable
MD5: 6228a3a94313044bbfe37c2c8519c92f
Size: 16.93 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 6228a3a94313044bbfe37c2c8519c92f |
| Sha1 | 7a64bb89702dcf61f222e49f6f91398e30460cdb |
| Sha256 | 9f9ba57f3c2425d94a2a2d40886d8582ec75b774814d6eeb9f0069f969c5eb25 |
| Sha384 | c13a079cb6cc6cbebbd86f37bf3028491346435672dba688c32c6e6f0cb09e6c7cd940df5c065fdd9a36fafa8f3f1ec8 |
| Sha512 | 7f24581c070a15770dc5db1ef3b7d8af72cc73dbc100aeaca0e6a95166f1dd650821ee3325335f2d96fc7b7b0056d59bd0517915bd82dc45fdd3aa97e469ad8d |
| SSDeep | 196608:mQfefP+2+kLGB1X+Z3/F+kLGB1E+kLGB1U+kLGB1c+kLGB1H+kLGB19:m8kqBRpkqBrkqBfkqB/kqBAkqBn |
| TLSH | 2E071212F3E58575D5BB0A38E8B946965A35BC054712C2BF53A8B96D3D32BC09E32333 |
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12VC8 -> Microsoft Corporation
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Authenticode present at 0x1025200 size 5688 bytes |
| Info | PDB Path: C:\Users\jmorgan\Source\cwcontrol\Custom\DotNetRunner\Release\DotNetRunner.pdb |
No malware configuration was found at this point.
You must be signed in to view YARA rules.