Suspicious
Suspect

b5034e10e73388475cb3d383c2b3853a

PE Executable
MD5: b5034e10e73388475cb3d383c2b3853a
Size: 619.52 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 b5034e10e73388475cb3d383c2b3853a
Sha1 5cd7c1ec9d3408adfe55db39120f89cce4940225
Sha256 3810dcbf520e708ced3f9de88308bcb270ba81f0bfeee13df59be681fb953559
Sha384 f85a5291e831924b8b7f9cd1780634d4420a04d808397f2b0d6079a1ca5a7219c37839019771a69ad188a2fe9193afa0
Sha512 fcfdb596c165e1a4ab5bef1915e0e4c0141d80c613a91593669edff5623f0d78e306d930b1b7259a60295f851012083278e39ac552136f8b10eebf808828e88f
SSDeep 6144:c7d8FtqVJLSGchfyRBkkeB3BRRPX8B+nEA1/TotX4qYbBEl36FqHLlQB4v4YMO:dFAIaRakeVDR8B+n/64qqEl36Fqd
TLSH 91D449403BE88604F1FF0BB6A4B205814BF6F447AE76D39F199560992D72741EE60BB3
PeID
Microsoft Visual C# / Basic .NET
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
b5034e10e73388475cb3d383c2b3853a
0x00043F73.svg
0x00043F73.svg-preview.jpg
.Net Resources
Appb9204777.Resources.brand_icon.svg
_r42926
STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Module Name
<null>
Full Name
<null>
Scope Name
<null>
Scope Type
ModuleDef
Kind
Dll
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Cored3f26a45Mod
Assembly Version
4.3.9886.96
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETCoreApp,Version=v8.0
Total Strings
3845
Main Method
Not found or no body
Module Name
<null>
Full Name
<null>
Scope Name
<null>
Scope Type
ModuleDef
Kind
Dll
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
Cored3f26a45Mod
Assembly Version
4.3.9886.96
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETCoreApp,Version=v8.0
Total Strings
3845
Main Method
Not found or no body
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
b5034e10e73388475cb3d383c2b3853a
0x00043F73.svg
0x00043F73.svg-preview.jpg
.Net Resources
Appb9204777.Resources.brand_icon.svg
_r42926
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙