Suspect
PE Executable
MD5: 9fd8ce7f513bf5dd468c877486e141b9
Size: 24.22 MB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Low
| MD5 | 9fd8ce7f513bf5dd468c877486e141b9 |
| Sha1 | bf9d95d3d2bc1ae2aa96c0ec14cf889e3327e1af |
| Sha256 | 141c523e62df52ba2bc9b74a4e91d2dba2348a343c45c1c69d5ebdb23f4a77cb |
| Sha384 | 89ff8aaf263109bb2d7f8f83b58ecdf21d3049f1429bf48a0c5325b1263e60524291fa9ee2d99d42c3f4b462ec0149c0 |
| Sha512 | d3ed601895bc171d277afd676e2b8883067326271847e74465e32b3e71b594790877580ad1920fdfa6cba4a2308052cc2cba33ccfd2a8b5c8014dda5adf2c1ec |
| SSDeep | 49152:oQEkDIJCnof36G4GiF6Vifog4wlDj2kkV2T59HmG+JwAk0m/U20gYfRA9qyvZy/j: |
| TLSH | B937383439FA501AB173EFAA5BE478AADA6FB7733B07641E1091038A4723941DDC153E |
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | roblox passowrd bloodlines.exe |
| Full Name | roblox passowrd bloodlines.exe |
| EntryPoint | System.Void Z.Expressions.CodeCompiler.CSharp.OverloadResolution.Init.Computer::Main() |
| Scope Name | roblox passowrd bloodlines.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | roblox passowrd bloodlines |
| Assembly Version | 7.6.4.8 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 6 |
| Main Method | System.Void Z.Expressions.CodeCompiler.CSharp.OverloadResolution.Init.Computer::Main() |
| Main IL Instruction Count | 2 |
| Main IL | |
| Module Name | roblox passowrd bloodlines.exe |
| Full Name | roblox passowrd bloodlines.exe |
| EntryPoint | System.Void Z.Expressions.CodeCompiler.CSharp.OverloadResolution.Init.Computer::Main() |
| Scope Name | roblox passowrd bloodlines.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | roblox passowrd bloodlines |
| Assembly Version | 7.6.4.8 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | <null> |
| Total Strings | 6 |
| Main Method | System.Void Z.Expressions.CodeCompiler.CSharp.OverloadResolution.Init.Computer::Main() |
| Main IL Instruction Count | 2 |
| Main IL | |
No malware configuration was found at this point.
You must be signed in to view YARA rules.