Suspect
PE Executable
MD5: 8a493a7f618326829f9fa7ac6f227669
Size: 1.02 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Medium
| MD5 | 8a493a7f618326829f9fa7ac6f227669 |
| Sha1 | 2a9223917867e2db0dc07c4e069a3701d976948b |
| Sha256 | 55c48c9c8523805a5c8e75d07bc671f9f72fd91eb3b77fbf9f413d292301e33f |
| Sha384 | 887c565c2f12b0e47857fa3e0157b85486bae97b94328dcb85dfdb51666807feb9230c15813adbcbb81557f3547e1d4a |
| Sha512 | 4a26e51885099adbc502c6c0a82412e1fac99eac46608ad94c9d7957590b02cf9d22a4b3de3b0f4665d7d9ec64da9e1effe53e5c31ac55900b6aad5e6a69f219 |
| SSDeep | 24576:V25smOZGlgE0/6+iAM4T2qan7/AbDDXZ6jssIA0FWKD6BL:K3O64O4Cb7/YDDJ6g3A0Qa6R |
| TLSH | E7251268675ACE22E5FA4BB10976D33103B0FD8D9452D306EEFA9CCB3911F586C642D2 |
STICH
beta
No STICH Path has been generated for this analysis yet.
3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2img
1| Name | Value |
|---|---|
| Module Name | vwzk.exe |
| Full Name | vwzk.exe |
| EntryPoint | System.Void PuddleSkipper.Program::Main() |
| Scope Name | vwzk.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | vwzk |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Total Strings | 286 |
| Main Method | System.Void PuddleSkipper.Program::Main() |
| Main IL Instruction Count | 10 |
| Main IL | |
| Info | PE Detect: PeReader OK (file layout) |