Suspect
PE Executable
MD5: c9f1c55b26e7f781b65a96ea8190517d
Size: 8.67 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Low
| MD5 | c9f1c55b26e7f781b65a96ea8190517d |
| Sha1 | dad71e6ac2ad9e3ce30152f993d0c765008c6b5a |
| Sha256 | 82e8904fd500c596b04786124a0515f1ecb9b9fc8b2187e449c30eeba1ba2316 |
| Sha384 | ecc2b33ff2bab1f1e83d7dcf2031ceb518dd77eb90047eef08688c078b05dd565db9b88824d800e447aa7fdc5123b635 |
| Sha512 | aaef6d78bf342a8ba0d04aa9653ca2336e7e17c21159c7dde0f9df9c31e2eeaa625ed821f9a71e0f36217ad9169f030a437215a4952c906a959b0efbf8ccb17d |
| SSDeep | 196608:dFU5JffPNSfxfuNqXaqtkSIVWH+lY1iP9a5NcINgqK2rICJ+:bIPNSfMGPkSEoOY139nHt+ |
| TLSH | 69961206B28AFD47D7322C345545E32D8A627E34EEE5A30B31BC39AD453B76D8848B47 |
PeID
Microsoft Visual C++ DLLMicrosoft Visual C++ v6.0
STICH
beta
No STICH Path has been generated for this analysis yet.
6 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
4img
2| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Authenticode present at 0x842C00 size 8048 bytes |
| Info | PDB Path: ? |
| Module Name | Bootstrapper.exe |
| Full Name | Bootstrapper.exe |
| EntryPoint | System.Void Bootstrapper.App::Main() |
| Scope Name | Bootstrapper.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Bootstrapper |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.8 |
| Total Strings | 128 |
| Main Method | System.Void Bootstrapper.App::Main() |
| Main IL Instruction Count | 6 |
| Main IL | |