62d706fb15cf867ed60a4a3c2ed70b1a

PE Executable

MD5: 62d706fb15cf867ed60a4a3c2ed70b1a

Size: 3.76 MB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	62d706fb15cf867ed60a4a3c2ed70b1a
Sha1	b33b94377bf1fa3410f259aa8555fe8a72412595
Sha256	239ef2d2bf331088146b00d3ae136d0291587f6b36fcc5e316bc1f0bb0aa5b3d
Sha384	b422c8877ecef83e8eaa53bf1bf8d2ef2fadaaa0dcba3c055159ab62e0e97fd16e5181f36cf06fc35a3358e530fb035e
Sha512	fe464756cd01c5746573ea85975f0086a6d7f5de0d8bc09f1ce1b15308e544030bd822d7f50048a6c9a92593d720efc454bc3ede0aa672f14de9deb9c2b0fc77
SSDeep	98304:fYIJCAcsYr5CxkYzPMifuL21zRb6lUwBbMuqt3th:AI4JjrIxrrASHubMuqN
TLSH	4806229573B2C53DE9628B789C30C65416323C1E6AA9C49C9D4A1C4C9876BD7CA03EFF

STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: C:\Users\Administrator\Desktop\CW final\obj\Release\net48\CW.pdb
Module Name	CW.exe
Full Name	CW.exe
EntryPoint	System.Void CW.App::Main()
Scope Name	CW.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	CW
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Total Strings	2126
Main Method	System.Void CW.App::Main()
Main IL Instruction Count	6
Main IL	`newobj System.Void CW.App::.ctor() dup <null> callvirt System.Void CW.App::InitializeComponent() callvirt System.Int32 System.Windows.Application::Run() pop <null> ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.