Suspicious
Suspect

62d706fb15cf867ed60a4a3c2ed70b1a

Share on LinkedIn
Print
PE Executable
MD5: 62d706fb15cf867ed60a4a3c2ed70b1a
Size: 3.76 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 62d706fb15cf867ed60a4a3c2ed70b1a
Sha1 b33b94377bf1fa3410f259aa8555fe8a72412595
Sha256 239ef2d2bf331088146b00d3ae136d0291587f6b36fcc5e316bc1f0bb0aa5b3d
Sha384 b422c8877ecef83e8eaa53bf1bf8d2ef2fadaaa0dcba3c055159ab62e0e97fd16e5181f36cf06fc35a3358e530fb035e
Sha512 fe464756cd01c5746573ea85975f0086a6d7f5de0d8bc09f1ce1b15308e544030bd822d7f50048a6c9a92593d720efc454bc3ede0aa672f14de9deb9c2b0fc77
SSDeep 98304:fYIJCAcsYr5CxkYzPMifuL21zRb6lUwBbMuqt3th:AI4JjrIxrrASHubMuqN
TLSH 4806229573B2C53DE9628B789C30C65416323C1E6AA9C49C9D4A1C4C9876BD7CA03EFF
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
CW.g.resources
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: C:\Users\Administrator\Desktop\CW final\obj\Release\net48\CW.pdb
Module Name
CW.exe
Full Name
CW.exe
EntryPoint
System.Void CW.App::Main()
Scope Name
CW.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
CW
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.8
Total Strings
2126
Main Method
System.Void CW.App::Main()
Main IL Instruction Count
6
Main IL
newobj System.Void CW.App::.ctor()
dup <null>
callvirt System.Void CW.App::InitializeComponent()
callvirt System.Int32 System.Windows.Application::Run()
pop <null>
ret <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙