Suspect
b19cc42fbf6b424be8e18aa4bbcffc57
PE Executable
MD5: b19cc42fbf6b424be8e18aa4bbcffc57
Size: 5.12 KB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Low
| MD5 | b19cc42fbf6b424be8e18aa4bbcffc57 |
| Sha1 | eba3cba0ab03308108f6ed18fc0daf46e1aea170 |
| Sha256 | e14647c08925cce2d51fc520ffe34d3c4ff41015ddaeea274836c1832d6b8ef8 |
| Sha384 | 57f7aafbc29f9e955ba512e9944f615413cc3ef051a1a33b69118ff5f5519dbed5d09c973886781ef795172416aee2dd |
| Sha512 | 5b80c2d13eaa6f116105ec66cd1c071aeb58c6416b3b9357aceea1bac44d367cc74c8f4b022170a2443f679e782927587b607528c61aa2f6b89ea199e2f74e70 |
| SSDeep | 48:6uHZSWgcJDTwEiJ4CndXaGb5szy+/z/Ws5j+lZUQNodxprl1XRvqOPulU0e1I:55SCRVGBaUSZz/+UtH/ai0e |
| TLSH | 99B19502BBE48237F0BF477456A34B3057B2B6658622C7AE1DC4916D6CA2558CB327A3 |
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
1| Name | Value |
|---|---|
| Module Name | WhoamiThrow.dll |
| Full Name | WhoamiThrow.dll |
| Scope Name | WhoamiThrow.dll |
| Scope Type | ModuleDef |
| Kind | Dll |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | WhoamiThrow |
| Assembly Version | 0.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 11 |
| Main Method | Not found or no body |
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | WhoamiThrow.dll |
| Full Name | WhoamiThrow.dll |
| Scope Name | WhoamiThrow.dll |
| Scope Type | ModuleDef |
| Kind | Dll |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | WhoamiThrow |
| Assembly Version | 0.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 11 |
| Main Method | Not found or no body |
No malware configuration was found at this point.
You must be signed in to view YARA rules.