Suspicious
Suspect

a23a0e9fe417f54b2be64d6077578589

Share on LinkedIn
Print
PE Executable
MD5: a23a0e9fe417f54b2be64d6077578589
Size: 1.53 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 a23a0e9fe417f54b2be64d6077578589
Sha1 1c014f82760176426852c21b49241f645ed29892
Sha256 ccd358639a4edbd5ea835deebd26082efc1f60a73beee7c4d53c5e673fe7b4e6
Sha384 9618588907ebb86b408bc90f7bd569887a8bb29b7f393451180681cc637b615d75ba1f0b3c4413b86aeab277794d2d66
Sha512 ea2c2ea870890f8314507f3220ae7e3cc27685871aac0fe9a9a8b999282680ac95f70d725507d1a2446a0de1f0c9115bc89d93d9c713896875f07e55451011f7
SSDeep 24576:vJ2riNiJkzz1UCa/Xvo3nGPMdVfzNBQDxQa9uouneIlvvEttRDSD5:x2rioJkzxUCivo3GUdVLNBQDia9uDct2
TLSH 94652348338ADF6BE8BB47FC6795941973F220AE6932C28D1DD522D551B2F048E29F43
a23a0e9fe417f54b2be64d6077578589
.Net Resources
AirPortStand.ApronForm.resources
AirPortStand.Properties.Resources.resources
NTtL
[NBF]root.Data
[NBF]root.Data-preview.png
abigail
[NBF]root.Data
[NBF]root.Data-preview.png
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Module Name
bKdP.exe
Full Name
bKdP.exe
EntryPoint
System.Void AirPortStand.Program::Main()
Scope Name
bKdP.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
bKdP
Assembly Version
201.502.607.709
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
485
Main Method
System.Void AirPortStand.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void AirPortStand.ApronForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Info
PE Detect: PeReader OK (file layout)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙