Suspicious
Suspect

96475961afb64c43415f862c77b9060a

Share on LinkedIn
Print
PE Executable
MD5: 96475961afb64c43415f862c77b9060a
Size: 749.57 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 96475961afb64c43415f862c77b9060a
Sha1 3b371ec7241cf7e8876c8b992f43e1818302ae2e
Sha256 65bbb73e6677176a57b27b8a3b7746f63d28d8632116593ed1d6c723b3b7204c
Sha384 160221e54aecff546c9e90c2adccf604b4914b14ebf61065067b989d98bf45ec04386cf071abc6e663aac5125b15d95e
Sha512 131d87447659acef2180be56fe27bdf21ca3aa387acf75bde01ca9218d564fd9ea98ffd6d0a94bf399c6ee9f2aa14b1a59bb7322b398116899e37b5869215a69
SSDeep 12288:pE8peMUOLAF5RWA66JGz22o2eZfjuHLLdbl1sLxoJ7IWeJcX3rAbbAdIV4T/TL3U:pE8peyAhD6pX+ZfML9sVS7pUbbAdlT/+
TLSH 79F4121533991F5AD27E47FA2BD1120113F2A9632BB1F58C5ECA32EB9A72F404B14E53
96475961afb64c43415f862c77b9060a
.Net Resources
AirPortStand.ApronForm.resources
AirPortStand.Properties.Resources.resources
abigail
[NBF]root.Data
[NBF]root.Data-preview.png
ynaP
[NBF]root.Data
[NBF]root.Data-preview.png
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Module Name
bbDH.exe
Full Name
bbDH.exe
EntryPoint
System.Void AirPortStand.Program::Main()
Scope Name
bbDH.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
bbDH
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
485
Main Method
System.Void AirPortStand.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void AirPortStand.ApronForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Info
PE Detect: PeReader OK (file layout)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙