32d65a033ed23f8e77fd573ca41253cc

PE Executable

MD5: 32d65a033ed23f8e77fd573ca41253cc

Size: 716.81 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	32d65a033ed23f8e77fd573ca41253cc
Sha1	dbbabf8f5c4277ebce4679261bc24334b9819157
Sha256	ffec8bac69d96ff2159ec9ad6e09525f133e15256079c7f54332e45ca1aed004
Sha384	aaaeb3f64da4f3a11e19610d7bed3e44aa5b82c6c8dea3713c2703671acf1f6b49fbe7ee44c2364f0d5b5c1814435153
Sha512	b15132b7a81b5f25884f68cebe99ec2869754cb342c5d5342e2fe6e8098012e7d507cec10ca3a5b89aacb16d77505eff9eb7cd960dd7e2984ed87add3566f0ea
SSDeep	12288:EhyxXt7C39HbkgKNL6LcYfLQHS00Q/DvR2tMPYOfxJ1dfikR:4ye31bS56LcgQy03bvR2tMwOxJ1RR
TLSH	6AE41246EA9AE900C5BA4B706952C1372BF17FCA7011D207AFF17DEF38387616A94381

Name	Value
Module Name	OsGy.exe
Full Name	OsGy.exe
EntryPoint	System.Void CalculatorPlus.Program::Main()
Scope Name	OsGy.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	OsGy
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	271
Main Method	System.Void CalculatorPlus.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void CalculatorPlus.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

PDB Path PATH

Oshuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

No malware configuration was found at this point.

PDB Path PATH

Oshuhuhuhu

32d65a033ed23f8e77fd573ca41253cc

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

You must be signed in to view YARA rules.