Suspicious
Suspect

a10466b6a444ccd6c661ab10fde34057

PE Executable
MD5: a10466b6a444ccd6c661ab10fde34057
Size: 713.1 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score High
MD5 a10466b6a444ccd6c661ab10fde34057
Sha1 e78d7cdf5a4f1e0a1a22978dc4c60dca15d9910f
Sha256 a5516a25bc40eb74359b74dccbf7309ffdc173c4a2d44a47f09d62da45f566c8
Sha384 8cf787b6b96bbbde5139dbd3d43944a41f55f2153e1f641b8b9fbd4706c71d6d8e5681c6c53a10627216ead936401558
Sha512 c2129b9e5a629251421241dda0001b14baca1eb46950fa6f1f9d959db6fa61a3e5da2e1cff57d2391c9a2e2315c8b62e21e96643f8038ee94f39024b567dcce8
SSDeep 12288:iHa/ZH+1f2JhnRGO1PKtv6oYKXCbBr5/mBS9APHd59HozPHa/:wjZuhR9K1XCjqPd59Sk
TLSH 40E4BF15174C7E0BE59E6A37C4F2600D27B5A0B5E9C3CB472444AB2D1FD1391AE32BAE
[Authenticode]_893bcc85.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.reloc
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
logs.Properties.Resources.resources
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0xA8400 size 23952 bytes
Info
PDB Path: C:\Users\Administrator\Desktop\084049\logs\logs\obj\Release\logs.pdb
Module Name
logs.exe
Full Name
logs.exe
EntryPoint
System.Void WindowsService.Agent.ProgramEntry::	
()
Scope Name
logs.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
logs
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.8
Total Strings
223
Main Method
System.Void WindowsService.Agent.ProgramEntry::	
()
Main IL Instruction Count
3
Main IL
ldstr Runtime exception
newobj System.Void System.Exception::.ctor(System.String)
throw <null>
[Authenticode]_893bcc85.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.reloc
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
logs.Properties.Resources.resources
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙