2223880c91c3339059d6c641ffd5c0e3

PE Executable

MD5: 2223880c91c3339059d6c641ffd5c0e3

Size: 5.12 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	2223880c91c3339059d6c641ffd5c0e3
Sha1	d6858d541c8bb3fbee07adc58be03f638c768f4f
Sha256	56767dd22ca1e988bc1514e3f308edc3d4d4a6852da79fd8ef91b1ff1e22a8da
Sha384	b1247faa5d9886b2abb8686648cb15b2fb4f4dd57202f36b001f5c36dbf5998b8c3981e9d3fb1625069acacb79b2ef3e
Sha512	e7ed8c5d94f15fcfb2e9cc9671943115b58cec875d5505f1cc345b30296a58b96d3555528cadba41e7ec78d7b4aa2c0416f240930f75fcb7c338a9f6c7bfc56c
SSDeep	48:6UanYx/v+6vEnADy2ImOLeTKAdJYtQ78Yj0e2KnhpSOulOb7q8pfbNtm:aGzEnADhWKthoO0eWgbpzNt
TLSH	CEB1E70297E84A2BE06A07700EF397D0B7B4E9169E67E7AF3EC4036E3C1166404637B0

STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1

Name	Value
Info	PE Detect: PeReader OK (file layout)
Module Name	test.exe
Full Name	test.exe
EntryPoint	System.Void HelloWorldApp.Geeks::Main(System.String[])
Scope Name	test.exe
Scope Type	ModuleDef
Kind	Console
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	test
Assembly Version	0.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	<null>
Total Strings	1
Main Method	System.Void HelloWorldApp.Geeks::Main(System.String[])
Main IL Instruction Count	22
Main IL	`nop <null> ldarg.0 <null> ldlen <null> conv.i4 <null> ldc.i4.1 <null> ceq <null> stloc.0 <null> ldloc.0 <null> brfalse.s IL_001F: ret nop <null> ldarg.0 <null> ldc.i4.0 <null> ldelem.ref <null> stloc.1 <null> ldloc.1 <null> call System.String HelloWorldApp.Geeks::Decrypt(System.String) stloc.2 <null> ldloc.2 <null> call System.Void System.Console::WriteLine(System.String) nop <null> nop <null> ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.