Suspect
PE Executable
MD5: b688a44b64ccae2dc53ff4bbe2304522
Size: 1.04 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Medium
| MD5 | b688a44b64ccae2dc53ff4bbe2304522 |
| Sha1 | 0723b422bfaf2e867ce6f48cdbd73c50f063e0bb |
| Sha256 | 36a3c500ed0500d0d2c222504cdd3023a4f3b8dabe2a50f45f31908b3a4ddd74 |
| Sha384 | a4d58ebc22d2d71e2dd223ace3bca76f42dad7f14aa45f9d45f24a9ebf923d33e3141211b46cc0604b480da97df67837 |
| Sha512 | 5360d2d047536dec40e6e25a0788124727207786a879874e28bd8e3df2c1c4be3f594b489e9c3ccc36481770749fa9957ae380dbcc696794c2741695ad11de39 |
| SSDeep | 12288:bgcJm86OKAX0rlYJazmd/cmW2fcrRmEmghNJS7fWhTz2ktGFtnjTjyh+3/9xohdk:bgdzrlYJ8mhMsgHJ0OkDnjahEed9 |
| TLSH | C22501D03B3AB719CE654674D5A8EEB152F61DAD74007AFA59DD3B8731AC2009E0CF06 |
PeID
Microsoft Visual C++ v6.0 DLL
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: zXZZ.pdb |
| Module Name | zXZZ.exe |
| Full Name | zXZZ.exe |
| EntryPoint | System.Void Parcheesi.Program::Main() |
| Scope Name | zXZZ.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | zXZZ |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Total Strings | 148 |
| Main Method | System.Void Parcheesi.Program::Main() |
| Main IL Instruction Count | 10 |
| Main IL | |