Deep Malware Analysis of da21bf5cb4e5fe8ed40b231ab6c46973 | md5: da21bf5cb4e5fe8ed40b231ab6c46973 | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | .Net | SOS: 1.00

PE Executable

MD5: da21bf5cb4e5fe8ed40b231ab6c46973

Size: 4.09 MB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Very high

MD5	da21bf5cb4e5fe8ed40b231ab6c46973
Sha1	6a4cd79eb9f5fc432959c3acb78b134e4b49edcf
Sha256	7be2273bfc26f6f298548a4ff29de90dd24c8dc6b473ea06c2d59c62e09cedff
Sha384	894efc83aed4d66419a93c62bf77523df387c2bad549cb2d7fafbea5b07d35e11aa20594a5adb5ddd4abff4eededa04c
Sha512	923ffd9499d040d6fe2baaee420f903d3e467ef27625ee53104684441d95f40c8d130fa37488659381b26481aec388f1ca0b8b93d9b717e1a9c834c554f54530
SSDeep	98304:Oa/vgp0ZdT/oKFvoQBphR5uE6ZER/9IgQp3UfBPGxyjZjzb23:/Hgp0ZdT/JoIUFStPGxyj8
TLSH	B11622DC369131AEC407DC3146581CB896536F6A7F2EB1079C237A6BB67F8C78E054A2

PeID

UPolyX 0.3 -> delikon

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	server1.exe
Full Name	server1.exe
EntryPoint	`System.Void ‍‫⁬⁫‮⁯‮‫⁫⁯‫⁯‬‏‏‌⁬‮‪⁭‫‍‍‎‪‎‎⁬⁫‬‏‮⁫‌‏‬⁬‫⁭‍‮::⁬‪⁫‫‏⁫⁭‪⁯⁬⁪‮‏⁫⁬‎⁭⁫‭⁯⁬‭⁪‬⁭⁫‫‌⁬⁮‫⁮‪‭‏⁭⁯‮()`
Scope Name	server1.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	server1
Assembly Version	3.6.8.9
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Total Strings	6
Main Method	`System.Void ‍‫⁬⁫‮⁯‮‫⁫⁯‫⁯‬‏‏‌⁬‮‪⁭‫‍‍‎‪‎‎⁬⁫‬‏‮⁫‌‏‬⁬‫⁭‍‮::⁬‪⁫‫‏⁫⁭‪⁯⁬⁪‮‏⁫⁬‎⁭⁫‭⁯⁬‭⁪‬⁭⁫‫‌⁬⁮‫⁮‪‭‏⁭⁯‮()`
Main IL Instruction Count	7
Main IL	`prefix2 <null> conv.ovf.u2.un <null> stind.r8 <null> stobj <null> ldloc.0 <null> add <null> bge.un <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.