Suspicious
Suspect

48f4e1542df2ca60b30a238d4b0c1b27

PE Executable
MD5: 48f4e1542df2ca60b30a238d4b0c1b27
Size: 1.56 MB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 48f4e1542df2ca60b30a238d4b0c1b27
Sha1 de347dd9398730b65d992ffbb68b31712a97f6c8
Sha256 d90e0f94e8df83ea22b969f61790f92e5439d0ce4eac48950e7c47aac0ada1b3
Sha384 f6beff4699f245f32f0a22d2c8b66d62e0f91e580adf94488878d6deac6bc7bdd8e5a1c5fcac034a6d17c5281a77f269
Sha512 1ac3a08dbacacfe6e17df74a90b087d748f0c8db07b145fc225d781e341fa7a9f1de4d007ebbf0adfb3d2cc8b2d448ea976358f7af94196f9a1fbb5bbd709e8e
SSDeep 24576:updzrlZ153rrQSlDPU+axfdeVzDn09+HAclKPgPVET97lEc4NOeeYRh5jQ:qlxrrvNPpaxfoVzD09q30g9kl63j7dQ
TLSH B77512E03E76772ADEA50574A128EE7542F51D687010BEFB6ADC3B5734AC210AE0CF52
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Parcheesi.Form1.resources
Parcheesi.Properties.Resources.resources
Cattttt
[NBF]root.Data
[NBF]root.Data-preview.png
V6
[NBF]root.Data
ffyR
[NBF]root.Data
[NBF]root.Data-preview.png
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: oStO.pdb
Module Name
oStO.exe
Full Name
oStO.exe
EntryPoint
System.Void Parcheesi.Program::Main()
Scope Name
oStO.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
oStO
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
148
Main Method
System.Void Parcheesi.Program::Main()
Main IL Instruction Count
10
Main IL
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void Parcheesi.Form1::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
Parcheesi.Form1.resources
Parcheesi.Properties.Resources.resources
Cattttt
[NBF]root.Data
[NBF]root.Data-preview.png
V6
[NBF]root.Data
ffyR
[NBF]root.Data
[NBF]root.Data-preview.png
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙