Suspicious
Suspect

a10466b6a444ccd6c661ab10fde34057

Share on LinkedIn
Print
PE Executable
MD5: a10466b6a444ccd6c661ab10fde34057
Size: 713.1 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score High
MD5 a10466b6a444ccd6c661ab10fde34057
Sha1 e78d7cdf5a4f1e0a1a22978dc4c60dca15d9910f
Sha256 a5516a25bc40eb74359b74dccbf7309ffdc173c4a2d44a47f09d62da45f566c8
Sha384 8cf787b6b96bbbde5139dbd3d43944a41f55f2153e1f641b8b9fbd4706c71d6d8e5681c6c53a10627216ead936401558
Sha512 c2129b9e5a629251421241dda0001b14baca1eb46950fa6f1f9d959db6fa61a3e5da2e1cff57d2391c9a2e2315c8b62e21e96643f8038ee94f39024b567dcce8
SSDeep 12288:iHa/ZH+1f2JhnRGO1PKtv6oYKXCbBr5/mBS9APHd59HozPHa/:wjZuhR9K1XCjqPd59Sk
TLSH 40E4BF15174C7E0BE59E6A37C4F2600D27B5A0B5E9C3CB472444AB2D1FD1391AE32BAE
[Authenticode]_893bcc85.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.reloc
.rsrc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
logs.Properties.Resources.resources
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0xA8400 size 23952 bytes
Info
PDB Path: C:\Users\Administrator\Desktop\084049\logs\logs\obj\Release\logs.pdb
Module Name
logs.exe
Full Name
logs.exe
EntryPoint
System.Void WindowsService.Agent.ProgramEntry::	
()
Scope Name
logs.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
logs
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.8
Total Strings
223
Main Method
System.Void WindowsService.Agent.ProgramEntry::	
()
Main IL Instruction Count
3
Main IL
ldstr Runtime exception
newobj System.Void System.Exception::.ctor(System.String)
throw <null>
An error has occurred. This application may no longer respond until reloaded. Reload 🗙