a6487fbf732770f7ebf1aec9324157f8

PE Executable
|
MD5: a6487fbf732770f7ebf1aec9324157f8
|
Size: 651.26 KB
|
application/x-dosexec

Infection Chain

Summary by MalvaGPT

Characteristics

Hash	Hash Value
MD5	a6487fbf732770f7ebf1aec9324157f8
Sha1	6d884e2894d6cfa4427f123a19a49f86dd52d9c1
Sha256	e9e9b6b8d6597bc10168304dfa63f25652533b9a9a8ae3206ef0c6b558dd6fec
Sha384	1c0108e7f54a58fc639856b4e7b06a72a22a93a760b736433cfefee35887d3ad656d9e24c21844e2a4ec7f4ef921e27b
Sha512	7206015fcaf090477117cc7f676408b73f7a1e2e05e96992eab939562d23804942b0f02e960936aa015f585eaa53d28fb10fa847e610a6d99237bdb0bfec4509
SSDeep	6144:5dSf9cg/62WcaLDC02yzsXjCn8o0CC8OhrhajycWaMN+VO3YHlZWHEnlKS:5dSKgGLex08oBLO2WaDnll
TLSH	35D46C91AE85CA53C9370EB547B6C33883B6DFB8BD534707A4BB7E2DBC366452901242

PeID

.NET executable

Microsoft Visual C# / Basic .NET

Microsoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL

Microsoft Visual C# v7.0 / Basic .NET

Microsoft Visual Studio .NET

File Structure

Informations

Name0	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	69816bd1403f5.exe
Full Name	69816bd1403f5.exe
EntryPoint	System.Void Microsoft.CLR.Hosting.RuntimeBootstrap::Main()
Scope Name	69816bd1403f5.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	69816bd1403f5
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	10
Main Method	System.Void Microsoft.CLR.Hosting.RuntimeBootstrap::Main()
Main IL Instruction Count	7
Main IL	nop <null> call System.Int32 Microsoft.CLR.Hosting.RuntimeBootstrap::InitializeComponent() stloc.0 <null> ldloc.0 <null> call System.Void System.Environment::Exit(System.Int32) nop <null> ret <null>
Module Name	69816bd1403f5.exe
Full Name	69816bd1403f5.exe
EntryPoint	System.Void Microsoft.CLR.Hosting.RuntimeBootstrap::Main()
Scope Name	69816bd1403f5.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	69816bd1403f5
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	10
Main Method	System.Void Microsoft.CLR.Hosting.RuntimeBootstrap::Main()
Main IL Instruction Count	7
Main IL	nop <null> call System.Int32 Microsoft.CLR.Hosting.RuntimeBootstrap::InitializeComponent() stloc.0 <null> ldloc.0 <null> call System.Void System.Environment::Exit(System.Int32) nop <null> ret <null>

Artefacts

Name0	Value
URLs in VB Code - #1	http://schemas.microsoft.com/SMI/2005/WindowsSettings

a6487fbf732770f7ebf1aec9324157f8 (651.26 KB)

File Structure

Characteristics

No malware configuration were found at this point.

Artefacts

Name0	Value	Location
URLs in VB Code - #1	http://schemas.microsoft.com/SMI/2005/WindowsSettings	a6487fbf732770f7ebf1aec9324157f8

You must be signed in to post a comment.