Deep Malware Analysis of c38725aca55e8b2295c734fa89de8234 | md5: c38725aca55e8b2295c734fa89de8234 | Executable | PE (Portable Executable) | .Net | Managed .NET | PE File Layout | SOS: 0.33 | Win 32 Exe | x86 | PDB Path

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	c38725aca55e8b2295c734fa89de8234
Sha1	c72d88dc794dbbf0a482a9afa9742321ddb088e6
Sha256	8aebbac16afbcb7673da9816b0548d2f568408eed97baebe222a2790f1ec1a6e
Sha384	5532d431c0d1021f150e364aca0d21061f08b17253dab8bece73832dda10759fd4200d25348b902726a3d9faa8bee77f
Sha512	40bc99d6980c8dccd8e85fc3bbfddb96de327ab2479fedf2ad9644d28c20d81668710af163ff963776d36eff5a69e94ec4c71ac2271cd311004d60164b83d0bd
SSDeep	24576:4IUNuA6gKUvNGzoc35Go/b8G9Kg/9lK2g9XE8G23rzzFycxO1xsVS9:VUggKU1Gz+cKgVlK9XEGPzFy6Ev
TLSH	5445F14023AEC916C1F25BF01970E3741BB99E48A421D3079FEABDEF793A7146919363

STICH beta

No STICH Path has been generated for this analysis yet.

4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 2

Name	Value
Module Name	TrXA.exe
Full Name	TrXA.exe
EntryPoint	System.Void Services.Program::Main()
Scope Name	TrXA.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	TrXA
Assembly Version	1.0.3.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Total Strings	378
Main Method	System.Void Services.Program::Main()
Main IL Instruction Count	20
Main IL	`nop <null> newobj System.Void Services.Form1::.ctor() stloc.0 <null> ldc.i4.5 <null> newobj System.Void Services.ProcessManager::.ctor(System.Int32) stloc.1 <null> nop <null> ldloc.0 <null> call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> nop <null> leave.s IL_0025: ret stloc.2 <null> nop <null> ldloc.1 <null> callvirt System.Void Services.ProcessManager::StopAllServicesAsync() nop <null> nop <null> leave.s IL_0025: ret ret <null>`
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: C:\Users\Administrator\Desktop\Client\Temp\FfmmnxYTkt\src\obj\Debug\TrXA.pdb