Deep Malware Analysis of 41783ce900c5078b1cd2bf16f8519c90 | md5: 41783ce900c5078b1cd2bf16f8519c90 | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.49

PE Executable

MD5: 41783ce900c5078b1cd2bf16f8519c90

Size: 1 MB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Medium

MD5	41783ce900c5078b1cd2bf16f8519c90
Sha1	a976f49ad1e1676f2d88a67a8641117ff976ef7f
Sha256	4e104d928c12846758db6ba19844f9fa2482db80fa67c82bb909ebb9e146867a
Sha384	5456a5ab1d1d0e5356dc06871ed95161d3abe6cc475267ced757e48cce4e5e1a8aeb544ae9cc63185ece34e2ecb7dbf8
Sha512	85209038f9f56c71774a50908d26eabbbfb18b3d4a08c575882e1345bbcad872891e511ea7820bbbe2b7e32372093671fb729233d68835c6361747e1a9db2446
SSDeep	24576:38fK+sNgfiMuG2zBEGtqEyySW6XNaU1Tn8B:gjSkGESqrWE1g
TLSH	65250154372EDB23C52947B45860F274137E2D9BAA91E2534EE8BEEF7871F044A40B93

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: C:\Users\Administrator\Desktop\Client\Temp\fVfpIqSjQG\src\obj\Debug\FsEP.pdb
Module Name	FsEP.exe
Full Name	FsEP.exe
EntryPoint	System.Void Wi2nAp1p.Program::Main()
Scope Name	FsEP.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	FsEP
Assembly Version	9.3.8.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	417
Main Method	System.Void Wi2nAp1p.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Wi2nAp1p.frmPrincipal::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`
Module Name	FsEP.exe
Full Name	FsEP.exe
EntryPoint	System.Void Wi2nAp1p.Program::Main()
Scope Name	FsEP.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	FsEP
Assembly Version	9.3.8.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	417
Main Method	System.Void Wi2nAp1p.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void Wi2nAp1p.frmPrincipal::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.