Malicious
f77a47d0ef746e0b652b83bcec755218
PE Executable
MD5: f77a47d0ef746e0b652b83bcec755218
Size: 153.6 KB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Very high
| MD5 | f77a47d0ef746e0b652b83bcec755218 |
| Sha1 | b7a30bd8d9e751b3867ef19a400b5b121acd1c5e |
| Sha256 | 070b1d5133a99c4ef41c7418e1034c39386006f58317ccf647f7384b88b1a64c |
| Sha384 | f6989002a12b844a71ad29a7f04fdfa68568890828761a2b5de21ab3a013dc4791a60a69242e88863c49a47bb5e969a3 |
| Sha512 | 3dadc814367d7345b41aab02a9ec92a91a73c0286e98990f34ffd32a36baf30b1f77069bc26401b4e9b334035b51a81b83729fd9e6bb9c6f31e2391e362f1654 |
| SSDeep | 3072:Q4aU06nl/jkNaD9JMtaCIVqV+TtMbI9fB1G1CkF18W:XmavMtfIVqitMbIvk |
| TLSH | BBE3193E37959E02D26C1EBAD0D3C1145371DD0667B7DB6A3D8539A80A02B817E0EBDE |
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:dll>pe:rsrc>bin
Shape
pe:dll>pe:rsrc>bin
malicious
3 nodes
Path
pe:dll>bin
Shape
pe:dll>bin
malicious
2 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | Oouxvfylg.dll |
| Full Name | Oouxvfylg.dll |
| Scope Name | Oouxvfylg.dll |
| Scope Type | ModuleDef |
| Kind | Dll |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Oouxvfylg |
| Assembly Version | 1.0.9686.23582 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.0 |
| Total Strings | 74 |
| Main Method | Not found or no body |
| Module Name | Oouxvfylg.dll |
| Full Name | Oouxvfylg.dll |
| Scope Name | Oouxvfylg.dll |
| Scope Type | ModuleDef |
| Kind | Dll |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | Oouxvfylg |
| Assembly Version | 1.0.9686.23582 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.0 |
| Total Strings | 74 |
| Main Method | Not found or no body |
No malware configuration was found at this point.
You must be signed in to view YARA rules.