Suspect
PE Executable
MD5: 6d141be8566a768dec036c4a6a173f6b
Size: 7.37 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Low
| MD5 | 6d141be8566a768dec036c4a6a173f6b |
| Sha1 | 6b64adfa7ff55f72a024342e54f9cf34adbadf78 |
| Sha256 | 6231e3ba7d5643ee173f92ef33d2dafa4bc2986954b16cd53195a3b87e3aa5a5 |
| Sha384 | 05434fbf2b2e5fa29299e370f0aaeea7a98e048d69561ca3240a07631ea6cadfd94493c4202773e6f70a20eb568b9e8d |
| Sha512 | d90c3c260675f71817d6337164fa4502445b75599722adb660719ac1bbe02743fa3d74e5d3785029750415ea6d8854c8d4adc4bb1abe56438ef4c25dc549baf1 |
| SSDeep | 196608:rr9uV25DeTD+oqzukSIlLtIY79n8SI75bWAXAkuujCPX9YG9he5GnQCAJKN:1A403qakSoR7tfI7ZtXADu8X9Y95GQLJ |
| TLSH | 6776334463FC0659F1BF6B78E87162119E32B613D43AE78D198C119C0A72B82EDA1F77 |
PeID
Microsoft Visual C++ DLLMicrosoft Visual C++ v6.0
STICH
beta
No STICH Path has been generated for this analysis yet.
5 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
4img
1| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: ? |
| Module Name | stub.exe |
| Full Name | stub.exe |
| EntryPoint | System.Void Phantom.Stub.Program::<Main>() |
| Scope Name | stub.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | stub |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.8 |
| Total Strings | 3224 |
| Main Method | System.Void Phantom.Stub.Program::<Main>() |
| Main IL Instruction Count | 6 |
| Main IL | |