9a48d7f7fd6e55816f87558e02ff5690

PE Executable

MD5: 9a48d7f7fd6e55816f87558e02ff5690

Size: 773.63 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Medium

MD5	9a48d7f7fd6e55816f87558e02ff5690
Sha1	36ca0f6d499d396e38b1a6eb6ba6cf2d1c32ef6a
Sha256	d1811755daa3a02ad817f8b136e4c7b8299f8b17af7e38bdab0059986d510a7f
Sha384	f399580c72cc4ac726007dd3855af3d22cfadd0a571a32deec1cbb91d05a19dca6c432635eaacb89efb87351cb12b1b6
Sha512	98a1ae6daaa638d20db0f8c2ed0fecf7c2583dc70a566731bc13958044962d21409edf02f2609b83d02732a3b4b883d1df0c5fdcab844b05d7aed5673678cf36
SSDeep	12288:RSWDUKIN5a6mKLugoFci/Lm8XiHV4RAPQQxat1qytIj0P0YLb+/8Lo/l+P3U:RSmUKINbLugo+i/Lm8y14RDMatM5S+aA
TLSH	33F4015EF531EE11C01D1B35C6131CB052A68C82F621F26B4A897CE22F397D9E09FA5B

PeID

.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET

Name	Value
Module Name	xygy.exe
Full Name	xygy.exe
EntryPoint	System.Void DamassaProject.Program::Main()
Scope Name	xygy.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	xygy
Assembly Version	2.8.5.1
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	2
Main Method	System.Void DamassaProject.Program::Main()
Main IL Instruction Count	21
Main IL	ldc.i4.1 <null> stloc.1 <null> ldloc.1 <null> switch dnlib.DotNet.Emit.Instruction[] call System.Void DamassaProject.Program::Ⴃ() ldc.i4 969 ldc.i4 947 call System.Void DamassaProject.fmrCadastro::Ⴃ(System.Int32,System.Int32) ldc.i4.0 <null> ldc.i4 954 ldc.i4 927 call System.Void DamassaProject.Models.Usuario::Ⴅ(System.Boolean,System.Int32,System.Int16) ldc.i4.2 <null> stloc.1 <null> br.s IL_0002: ldloc.1 newobj System.Void DamassaProject.fmrListarUsuario::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null> ldtoken System.Void DamassaProject.Program::Main() pop <null> ret <null>
Module Name	xygy.exe
Full Name	xygy.exe
EntryPoint	System.Void DamassaProject.Program::Main()
Scope Name	xygy.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	xygy
Assembly Version	2.8.5.1
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	2
Main Method	System.Void DamassaProject.Program::Main()
Main IL Instruction Count	21
Main IL	ldc.i4.1 <null> stloc.1 <null> ldloc.1 <null> switch dnlib.DotNet.Emit.Instruction[] call System.Void DamassaProject.Program::Ⴃ() ldc.i4 969 ldc.i4 947 call System.Void DamassaProject.fmrCadastro::Ⴃ(System.Int32,System.Int32) ldc.i4.0 <null> ldc.i4 954 ldc.i4 927 call System.Void DamassaProject.Models.Usuario::Ⴅ(System.Boolean,System.Int32,System.Int16) ldc.i4.2 <null> stloc.1 <null> br.s IL_0002: ldloc.1 newobj System.Void DamassaProject.fmrListarUsuario::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) ret <null> ldtoken System.Void DamassaProject.Program::Main() pop <null> ret <null>

No malware configuration was found at this point.

You must be signed in to view YARA rules.