Suspect
PE Executable
MD5: e0884dfb1745aaad8ef5adc08f93ded4
Size: 46.59 KB
application/x-dosexec
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Low
| MD5 | e0884dfb1745aaad8ef5adc08f93ded4 |
| Sha1 | 36bcdc0d4a2756a8fd542e7d283498e45bfb8f9b |
| Sha256 | cc14bc97e9926353ea4953e44a12e673654b98bdcbc7820ae9ed48868c1f5af5 |
| Sha384 | b9741216be20786ec24a8b703f1f7efd9f9a4d3540fd5169f1d49a9d672e3bcf14c1c952d600c68f2c6be96372bf767f |
| Sha512 | 2d57958bf382535d57a37bc708357d0af6470caf8b19e2d41a191b170c3fb598c2117254eaf774dd3b34cd0cf3181a80716b16e6b0cff8620224a850e4e20c92 |
| SSDeep | 768:tdhO/poiiUcjlJIn57ElmH9Xqk5nWEZ5SbTDaiuI7CPW5F:jw+jjgnFElmH9XqcnW85SbTXuIN |
| TLSH | CF23F84C57AC8923E6AF5ABD9832425387B3F3669532E38F08CCD4E9379338555053A7 |
PeID
.NET executableMicrosoft Visual C# / Basic .NETMicrosoft Visual C# / Basic.NET / MS Visual Basic 2005 - ASL Microsoft Visual C# v7.0 / Basic .NETMicrosoft Visual Studio .NET
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Module Name | xeno rat client.exe |
| Full Name | xeno rat client.exe |
| EntryPoint | System.Void xeno_rat_client.Program::<Main>(System.String[]) |
| Scope Name | xeno rat client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | xeno rat client |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.8 |
| Total Strings | 64 |
| Main Method | System.Void xeno_rat_client.Program::<Main>(System.String[]) |
| Main IL Instruction Count | 7 |
| Main IL | |
| Module Name | xeno rat client.exe |
| Full Name | xeno rat client.exe |
| EntryPoint | System.Void xeno_rat_client.Program::<Main>(System.String[]) |
| Scope Name | xeno rat client.exe |
| Scope Type | ModuleDef |
| Kind | Windows |
| Runtime Version | v4.0.30319 |
| Tables Header Version | 512 |
| WinMD Version | <null> |
| Assembly Name | xeno rat client |
| Assembly Version | 1.0.0.0 |
| Assembly Culture | <null> |
| Has PublicKey | False |
| PublicKey Token | <null> |
| Target Framework | .NETFramework,Version=v4.8 |
| Total Strings | 64 |
| Main Method | System.Void xeno_rat_client.Program::<Main>(System.String[]) |
| Main IL Instruction Count | 7 |
| Main IL | |