Deep Malware Analysis of dcbab2ac8ab03cd7905b095ca65ad53b | md5: dcbab2ac8ab03cd7905b095ca65ad53b | .Net | PE (Portable Executable) | SOS: 0.33 | Executable | Managed .NET | PE File Layout | Win 32 Exe | x86 | PDB Path

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	dcbab2ac8ab03cd7905b095ca65ad53b
Sha1	de87e074431626390d9175f91a3f3bc42b93c2ef
Sha256	d28f468cdd8314b36c7cabece725d41ff137eebd180179da40f9c14d2baf1a34
Sha384	7b03fd4e7dfbed84024ce6435e50f4fb7a5dad4ab213a4b672f189994a5f90935034f353e68a9727dd5da89755ccd0e1
Sha512	1037671e34596acbf2763843b7a75c5d3a42ca5325724549cd9a4dfe43efa294c3943c34c729d400e7c6fcdc6b40173060e1b937bf55de644bec1af72a77882f
SSDeep	49152:tUggKk1G1cef5/yIOD9OhcdPoBqa6/6E09:GggKk1/i5/yXD9ZNmqa6iV
TLSH	3875AF6096EACCAEC07215781430D6700976DFC65702E789A4EEBD3FFC34742A599A3B

STICH beta

No STICH Path has been generated for this analysis yet.

3 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2img 1

Name	Value
Module Name	IukW.exe
Full Name	IukW.exe
EntryPoint	System.Void Services.Program::Main()
Scope Name	IukW.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	IukW
Assembly Version	1.0.3.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.8
Total Strings	378
Main Method	System.Void Services.Program::Main()
Main IL Instruction Count	20
Main IL	`nop <null> newobj System.Void Services.Form1::.ctor() stloc.0 <null> ldc.i4.5 <null> newobj System.Void Services.ProcessManager::.ctor(System.Int32) stloc.1 <null> nop <null> ldloc.0 <null> call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> nop <null> leave.s IL_0025: ret stloc.2 <null> nop <null> ldloc.1 <null> callvirt System.Void Services.ProcessManager::StopAllServicesAsync() nop <null> nop <null> leave.s IL_0025: ret ret <null>`
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: C:\Users\Administrator\Desktop\Client\Temp\AQcdrFcctD\src\obj\Debug\IukW.pdb