Deep Malware Analysis of a4f4aa29e5eebbdb1e86466b1c55976a | md5: a4f4aa29e5eebbdb1e86466b1c55976a | Executable | PE (Portable Executable) | .Net | Managed .NET | PE File Layout | SOS: 0.37 | Win 32 Exe | x86 | PDB Path

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Medium

MD5	a4f4aa29e5eebbdb1e86466b1c55976a
Sha1	a5f6bc78dcd96938972b1199e5d6924e83fed9e4
Sha256	a4c4f0a300ce5aad85f93edd5c07b9d11947b97a3a9b3da51d024310bfe2d7de
Sha384	916d826b2a3351f71482da92d5721208d7f8a4c4394ae31276bc0044e839b863f7e6b5478846698b1b19d5b0033657e9
Sha512	6a6dcb264c400197567bab9205e50de14ef24d7d22d67491ecc9aa2c43a0437851e99188bb0dcf0146b543a5a1ac5b446049367607d857d4ebed4fa326f0a28e
SSDeep	24576:TJ4NBmACv7rBQF9J3yFzHKOs3FcRLWxI8oDImfpH4wVb+vz0:TJ4fu7KF9ZyBHuFcRP8oDImffkz
TLSH	564512207466EB05D46A47F50622E1B067B99E8EF265E36B9FCABCCB3464F011F41723

STICH beta

No STICH Path has been generated for this analysis yet.

4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 2

Name	Value
Module Name	Tckt.exe
Full Name	Tckt.exe
EntryPoint	System.Void VietCommerce.Program::Main()
Scope Name	Tckt.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Tckt
Assembly Version	6.2.4.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.7.2
Total Strings	576
Info	PE Detect: PeReader OK (file layout)
Main Method	System.Void VietCommerce.Program::Main()
Main IL Instruction Count	13
Main IL	nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void VietCommerce.Main::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> newobj System.Void VietCommerce.Form1::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>
Info	PDB Path: C:\Users\Administrator\Desktop\Client\Temp\tkkVsaIucq\src\obj\Debug\Tckt.pdb