Deep Malware Analysis of a97b454de0a1f681567f0ec11cae52f0 | md5: a97b454de0a1f681567f0ec11cae52f0 | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.33

PE Executable

MD5: a97b454de0a1f681567f0ec11cae52f0

Size: 544.77 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Low

MD5	a97b454de0a1f681567f0ec11cae52f0
Sha1	deadb148714337d01e424a4a594f9f07b0d92777
Sha256	4b3c7e98f64622c68cd4d61b313b7a07523e1276eb0e66fd1187e8ef2ddec23d
Sha384	183eb7db452f6c8e3b5352a24cb36ba2d026abf8c22047b10321f64e6f834e13920632849d6c6ff8a2177a060fcaddee
Sha512	c64209cbefc3835ea6a4be5bb571b230fa87434f7a33104881a5d52cf023a1b483bd18b4d3420ce5b3f798bc5447a7ba3e899c927f8fa0e764faa53c185b3b40
SSDeep	12288:dPY8VQKBClKwSIzXYVDK7dZUO5vJqCPq8K:+8uKBClmIk9aoO5vVSn
TLSH	E0C4F1213399D926D9EA07F10032D23817397E4DA523D31A6FDEACDF3972B819658723

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: ?
Module Name	sWt.exe
Full Name	sWt.exe
EntryPoint	System.Void Assignment_1_Agenda.Program::Main()
Scope Name	sWt.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	sWt
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.7.2
Total Strings	432
Main Method	System.Void Assignment_1_Agenda.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Assignment_1_Agenda.AgendaActiv::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`
Module Name	sWt.exe
Full Name	sWt.exe
EntryPoint	System.Void Assignment_1_Agenda.Program::Main()
Scope Name	sWt.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	sWt
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.7.2
Total Strings	432
Main Method	System.Void Assignment_1_Agenda.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Assignment_1_Agenda.AgendaActiv::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.