Deep Malware Analysis of aa86dcb0aa70711462e7d5a451c4034e | md5: aa86dcb0aa70711462e7d5a451c4034e | Executable | PE (Portable Executable) | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.19

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Very low

MD5	aa86dcb0aa70711462e7d5a451c4034e
Sha1	6ec35ba82a57e6fe8b479e53edc6d01fd1a076e3
Sha256	eb93294abe8d7afffa66b6d07a7dd990849a1a342f2c9096f54105db26592f1f
Sha384	ad3bc3c9c67d7a416e0c801287adc14cabc25da1a7cfabea5ded8f3bb855e7f8eee1208a14346f1dabb72dd0c7f97a9c
Sha512	b5494f8501bdc61c180f6de820d84ceacc1066410dfb2b230434ba6e82ba01c7392b6827153816db40a4f0a513923db393de73b990d2673d6bdfd31feadb5fee
SSDeep	12288:Q3NNEk4eM7v1XOdO8IgSm05jrdIZSn7995t0CIhnP1iY9qlDx:8NNEOUvxgOQSBBLb5pciYMl
TLSH	C3F4126B2148C64AE0452BF28493E735037D1D8FEA64E349E7E5FDEB782F621561C382

PeID

Pe123 v2006.4.4-4.12

Name	Value
Module Name	lwOA.exe
Full Name	lwOA.exe
EntryPoint	System.Void Cycle_Jump_Game.More::Main()
Scope Name	lwOA.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	lwOA
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	64
Main Method	System.Void Cycle_Jump_Game.More::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Cycle_Jump_Game.Main::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

PDB Path PATH

lwhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.