Suspect
76951174dd75e3f2b7fa648f251a136d
PE Executable
MD5: 76951174dd75e3f2b7fa648f251a136d
Size: 13.55 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Low
| MD5 | 76951174dd75e3f2b7fa648f251a136d |
| Sha1 | aadbbc284328688178b52044c35ed4d594519d9e |
| Sha256 | 837f00cf3fddab67ed11d80c129c1931dc13753de4838321187739442f80cde9 |
| Sha384 | e00e74708ba6d3a81cbddff794bd14f8bd3283831ddb3420a30be5ace141385d0d7d0abf290ff7c01cf22e3849cb79df |
| Sha512 | 4129fd4ec677570669fd5615761645b5671dbe02fd7a97650bd6fd1b7f899b5e53391dd105bdb129c1372f794900cfd8414fb45ac7c4b4f509f29fe3a5c03d7d |
| SSDeep | 98304:d0ShxsDDz9cHqTE0PydxeM2EpGCYoy960DawWM:d0ShxeDz1TEIHhEpGCYoy9tDaR |
| TLSH | 2ED65A5252ECBD86D23A4279E37393E0D7ACDC168351D2CF0590BE063ABE6837636395 |
PeID
HQR data fileMicrosoft Visual C++ DLLMicrosoft Visual C++ v6.0Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12Private EXE Protector V2.30-V2.3X -> SetiSoft Team
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Module Name | System.Windows.Forms.dll |
| Full Name | System.Windows.Forms.dll |
| Scope Name | System.Windows.Forms.dll |
| Scope Type | ModuleDef |
| Kind | Dll |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | System.Windows.Forms |
| Assembly Version | 8.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | True |
| PublicKey Token | b77a5c561934e089 |
| Target Framework | .NETCoreApp,Version=v8.0 |
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: System.Windows.Forms.ni.pdb |
| Total Strings | 6073 |
| Main Method | Not found or no body |
No malware configuration was found at this point.
You must be signed in to view YARA rules.