Deep Malware Analysis of 6893600a7066d33bd7944bdd59891aec | md5: 6893600a7066d33bd7944bdd59891aec | Executable | PE (Portable Executable) | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.30

PE Executable

MD5: 6893600a7066d33bd7944bdd59891aec

Size: 880.64 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	6893600a7066d33bd7944bdd59891aec
Sha1	01d14a6d97934e12f8d29c237da72c542b78bdaa
Sha256	784ce0e82c852d420792062fc2370bfed13b8b846bbc126bfd5f6e3f5d1a2c67
Sha384	df67060c5b07d451cbb167bab09baf18fd5c9c4dddfce4d340825ae82dc57e16671ef47cb85357edbf7d31895911fa1a
Sha512	8d2c431dc4ff94aaef358c58bd953d594682167ab67d4f25bf0183b7568c4580f2505d1d4ebf0c9b24671dc8cdcb84d599865ebb42b300ab5aca0f64f6df269d
SSDeep	12288:rzLOwUN9f3ZrUXwUSVyUmyRWSc/WmaMH1bFLxzKMNPwmytVmU1zYur1g+wCQ1pug:XB+xrbydyRWS6DHPUMNY5vm0xC3Ckr
TLSH	4A1512D72A05D207DD65BF784DB2C3F5D362DE89A800C307A9D9FE8B3A36D11295C162

Name	Value
Module Name	aFR.exe
Full Name	aFR.exe
EntryPoint	System.Void SimplePaint.Program::Main()
Scope Name	aFR.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	aFR
Assembly Version	2.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	84
Main Method	System.Void SimplePaint.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void SimplePaint.FrmMain::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

PDB Path PATH

aFhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

No malware configuration was found at this point.

PDB Path PATH

aFhuhuhuhu

6893600a7066d33bd7944bdd59891aec

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

You must be signed in to view YARA rules.