Suspicious
Suspect

f1b2ab896ad9630d55a9753d88dd42de

Share on LinkedIn
Print
PE Executable
MD5: f1b2ab896ad9630d55a9753d88dd42de
Size: 879.1 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 f1b2ab896ad9630d55a9753d88dd42de
Sha1 85b52f4e7d35dbbf31590ee38ec1d1615729eb15
Sha256 a5ef8b96d0fbcec7b469aff4f53266e21159539ef2486b13fad1b1084c79abca
Sha384 fa953a743733315f7fc434c1f223d6ac8f154b79cef5724cee24baab134552fff648de23fe96b86da8ccd408255d48f6
Sha512 056f152cbbb86a1d90d4de8d584186b94cbfb68b5e8ef795d7813541f2df6c73b4b1c4866446b4719928b86e09a6a70ce5c49000f61f2f01249d867134ca4ea4
SSDeep 12288:8aZhH/Plg1QWdnby5AFzjx0lNvwaZbFdWTN4gxQmam:JhAG5Axjx0lNvwa1FdWTN4gxQmam
TLSH 66155A9033B44878C46F4B3950A14344B375A507A7E4CE6E2DEA6B9CECC67074E227BB
PeID
Microsoft Visual C# / Basic .NET
.Net Resources
BaseSkin.g.resources
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2
Name Value
Module Name
BaseSkin.dll
Full Name
BaseSkin.dll
Scope Name
BaseSkin.dll
Scope Type
ModuleDef
Kind
Dll
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
BaseSkin
Assembly Version
1.1.1.8
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
1716
Main Method
Not found or no body
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: D:\??????\Svn\zfcgkhd2.0\zfcgkhd2.0\iWisZFCG_2\src\BaseSkin\obj\Release\net45\BaseSkin.pdb
Module Name
BaseSkin.dll
Full Name
BaseSkin.dll
Scope Name
BaseSkin.dll
Scope Type
ModuleDef
Kind
Dll
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
BaseSkin
Assembly Version
1.1.1.8
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
1716
Main Method
Not found or no body
An error has occurred. This application may no longer respond until reloaded. Reload 🗙