Suspect
PE Executable
MD5: c9dd06b54122a3c7b27299720b403a92
Size: 148.48 KB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Medium
| MD5 | c9dd06b54122a3c7b27299720b403a92 |
| Sha1 | f9b09befb30866b099222758b9dced1e58540c87 |
| Sha256 | b709d2521e36fb30edbddffff27e7a09a0aa2766cd98c6aea38c92bd1f953176 |
| Sha384 | 44ae5ed38d3410cc99579fd93d23b8a62a58b2481d8be30fdbab733323d9ab6d11ed22b74d3127c011a3d2505007a242 |
| Sha512 | e8302c44bcb97e03dcb5cb157118490de2597543f7ea7ef124c2e4b70e66cad74cf78937416ab1b6e49812de533cb9b64ebfb98b830490f3d511722c3d5403c2 |
| SSDeep | 3072:SoYBhkM8tTWFPWq8R5RO8Aaqg1dQznziVJ+cwUQDag+DceeEc:gjk0Wq35iy0J+/UQDu5 |
| TLSH | 31E3092C6FD47F74DBAE0778C8532321ABB5E0AB16E3A39F08C815751F64358E6640DA |
PeID
Microsoft Visual C++ DLLMicrosoft Visual C++ v6.0
STICH
beta
No STICH Path has been generated for this analysis yet.
1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
1| Name | Value |
|---|---|
| Module Name | Server.exe |
| Full Name | Server.exe |
| EntryPoint | System.Void A.B::A() |
| Scope Name | Server.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Server |
| Assembly Version | 0.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.5 |
| Info | PE Detect: PeReader OK (file layout) |
| Info | PDB Path: ? |
| Total Strings | 0 |
| Main Method | System.Void A.B::A() |
| Main IL Instruction Count | 3 |
| Main IL | |