Deep Malware Analysis of 8c73f4a220a1d3017c6cbc32b7048ecd | md5: 8c73f4a220a1d3017c6cbc32b7048ecd | Executable | PE (Portable Executable) | Managed .NET | PE File Layout | Win 32 Exe | x86 | PDB Path | .Net | SOS: 0.48

PE Executable

MD5: 8c73f4a220a1d3017c6cbc32b7048ecd

Size: 1.27 MB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Medium

MD5	8c73f4a220a1d3017c6cbc32b7048ecd
Sha1	8d34b6edc8c6922d095ef6f62868ee3717f05790
Sha256	7b00775642a4c0e4fcf14f4cc5c24e7595d41b80d24ff6cd0ecef5bfae5e316e
Sha384	a7893e903efdd2a057328626c842165dc9230406557978e5572a8363d06edc9365f149a6920e3afe866b498c9e01a7f9
Sha512	411921b658d0cbdb73af7ebf216ac5847331ca5ce5a8d3832221792c7eb712fa8af94e84906c01054da7edde9e14aa02f5ec268713638a77fc52af07803df2c1
SSDeep	24576:A2vWOS2qzZPDIsEHchb+TNP9IbdnvSeFy6gHZ5luW1okQdhigDi5WFj8CgA5/W9J:A6WOSpzZ8ZHUqTNP9IpvSGyn1u5N/acZ
TLSH	1445124433A9EB02E5B71FF02974D37013BA6D5AB922D3064EEA6CEF7875B005921793

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	PDB Path: Oers.pdb
Module Name	Oers.exe
Full Name	Oers.exe
EntryPoint	System.Void ErrorAnalyzer.Program::Main()
Scope Name	Oers.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Oers
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	438
Main Method	System.Void ErrorAnalyzer.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void ErrorAnalyzer.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`
Module Name	Oers.exe
Full Name	Oers.exe
EntryPoint	System.Void ErrorAnalyzer.Program::Main()
Scope Name	Oers.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	Oers
Assembly Version	1.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	438
Main Method	System.Void ErrorAnalyzer.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void ErrorAnalyzer.Forms.MainForm::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

No malware configuration was found at this point.

You must be signed in to view YARA rules.