aa86dcb0aa70711462e7d5a451c4034e

PE Executable

MD5: aa86dcb0aa70711462e7d5a451c4034e

Size: 733.18 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Very low

MD5	aa86dcb0aa70711462e7d5a451c4034e
Sha1	6ec35ba82a57e6fe8b479e53edc6d01fd1a076e3
Sha256	eb93294abe8d7afffa66b6d07a7dd990849a1a342f2c9096f54105db26592f1f
Sha384	ad3bc3c9c67d7a416e0c801287adc14cabc25da1a7cfabea5ded8f3bb855e7f8eee1208a14346f1dabb72dd0c7f97a9c
Sha512	b5494f8501bdc61c180f6de820d84ceacc1066410dfb2b230434ba6e82ba01c7392b6827153816db40a4f0a513923db393de73b990d2673d6bdfd31feadb5fee
SSDeep	12288:Q3NNEk4eM7v1XOdO8IgSm05jrdIZSn7995t0CIhnP1iY9qlDx:8NNEOUvxgOQSBBLb5pciYMl
TLSH	C3F4126B2148C64AE0452BF28493E735037D1D8FEA64E349E7E5FDEB782F621561C382

PeID

Pe123 v2006.4.4-4.12

Name	Value
Module Name	lwOA.exe
Full Name	lwOA.exe
EntryPoint	System.Void Cycle_Jump_Game.More::Main()
Scope Name	lwOA.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	lwOA
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	64
Main Method	System.Void Cycle_Jump_Game.More::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Cycle_Jump_Game.Main::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

PDB Path PATH

lwhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

No malware configuration was found at this point.

PDB Path PATH

lwhuhuhuhu

aa86dcb0aa70711462e7d5a451c4034e

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

You must be signed in to view YARA rules.