c9dd06b54122a3c7b27299720b403a92

PE Executable

MD5: c9dd06b54122a3c7b27299720b403a92

Size: 148.48 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Medium

MD5	c9dd06b54122a3c7b27299720b403a92
Sha1	f9b09befb30866b099222758b9dced1e58540c87
Sha256	b709d2521e36fb30edbddffff27e7a09a0aa2766cd98c6aea38c92bd1f953176
Sha384	44ae5ed38d3410cc99579fd93d23b8a62a58b2481d8be30fdbab733323d9ab6d11ed22b74d3127c011a3d2505007a242
Sha512	e8302c44bcb97e03dcb5cb157118490de2597543f7ea7ef124c2e4b70e66cad74cf78937416ab1b6e49812de533cb9b64ebfb98b830490f3d511722c3d5403c2
SSDeep	3072:SoYBhkM8tTWFPWq8R5RO8Aaqg1dQznziVJ+cwUQDag+DceeEc:gjk0Wq35iy0J+/UQDu5
TLSH	31E3092C6FD47F74DBAE0778C8532321ABB5E0AB16E3A39F08C815751F64358E6640DA

PeID

Microsoft Visual C++ DLLMicrosoft Visual C++ v6.0

STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1

Name	Value
Module Name	Server.exe
Full Name	Server.exe
EntryPoint	System.Void A.B::A()
Scope Name	Server.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Server
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: ?
Total Strings	0
Main Method	System.Void A.B::A()
Main IL Instruction Count	3
Main IL	`call System.Int32 a.J::B() pop <null> ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.