Suspect
bcda03d8cc7d4578f72b8360bbbbda89
PE Executable
MD5: bcda03d8cc7d4578f72b8360bbbbda89
Size: 116.22 KB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Medium
| MD5 | bcda03d8cc7d4578f72b8360bbbbda89 |
| Sha1 | 0b3e712c3ef2ff124aa84da315b668078ebf4fa6 |
| Sha256 | 3c7ee535ff25a72644771a5a27a58a0347562e1f35507cce9249ffbee7ebff0d |
| Sha384 | 7ef8dca3d17be7ad74ac5299b0ab739f15eb4452ad42a953b8d7e7e5f8bf511f0a10cf74a7f1a39bf3c803976949f43b |
| Sha512 | 0dd39e01f1307bc8e6ef7d80decc3282ecda6bd20af597d936e4242608d82f0d323b9c6e1cd0468d00f5e7c8b4f066a641aa88cfd42c5132916dd42cbb0ea550 |
| SSDeep | 3072:0y4UhJYtoWyKEQKfC45js2oMV95iy3MTF:1mByKIUSsGO |
| TLSH | 54B32799BB159176DFEF473484F7290D80F032A94942E23F299DEAD07E946EC431EB80 |
PeID
Microsoft Visual C++ DLLMicrosoft Visual C++ v6.0Microsoft Visual C++ v6.0 DLL
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Module Name | WbElevation.dll |
| Full Name | WbElevation.dll |
| Scope Name | WbElevation.dll |
| Scope Type | ModuleDef |
| Kind | Dll |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | WbElevation |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.7.2 |
| Total Strings | 2 |
| Main Method | Not found or no body |
| Info | PE Detect: PeReader OK (file layout) |
No malware configuration was found at this point.
You must be signed in to view YARA rules.