Suspicious
Suspect

PE Executable
MD5: fc1e0917d6b69bc92fba4734e61a23d5
Size: 738.82 KB
application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 fc1e0917d6b69bc92fba4734e61a23d5
Sha1 792e1788f79728f590293bffbaa9cbff795f613a
Sha256 37dc8d3d4987e46bd8aea0be9a7de2fade3f8b4e2c5db5d498f6d20bc0d287f7
Sha384 6049ec278bc301cc2deb6f9f37a21c62f0c2b2a32d1194ef5b6d0fee3ca068f52aac45076510d0ff97264b53e4ad2193
Sha512 66c0813a2ad78a1476b0c5e85277820b2c4688608bef8b197660fa4e0b57ba70d9c9fff04b2515730d10a9e279bd0461bec75c9355b26aac90ca86567e156319
SSDeep 12288:Lm0k20Rk1FlX2Yd7xmIHWXYO5UV1z6wzeN0/7IOwQKVI4ArqYuWLzqKcWzxI6PdE:CwlX9xQLO3zjzeNDOSPAr9uWfcY66Y
TLSH 81F4018467A69906F4BA1B3416B1F2B44BB87CA6AC31D30E9FC96CDF7835F409854393
fc1e0917d6b69bc92fba4734e61a23d5
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
MonitorSync.Properties.Resources.resources
HQ
[NBF]root.Data
YccZ
[NBF]root.Data
[NBF]root.Data-preview.png
Name Value
Module Name
xJbR.exe
Full Name
xJbR.exe
EntryPoint
System.Void MonitorSync.Program::Main()
Scope Name
xJbR.exe
Scope Type
ModuleDef
Kind
Windows
Runtime Version
v4.0.30319
Tables Header Version
512
WinMD Version
<null>
Assembly Name
xJbR
Assembly Version
1.0.0.0
Assembly Culture
<null>
Has PublicKey
False
PublicKey Token
<null>
Target Framework
.NETFramework,Version=v4.5
Total Strings
491
Main Method
System.Void MonitorSync.Program::Main()
Main IL Instruction Count
10
Main IL 
nop <null>
call System.Void System.Windows.Forms.Application::EnableVisualStyles()
nop <null>
ldc.i4.0 <null>
call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean)
nop <null>
newobj System.Void MonitorSync.MainForm::.ctor()
call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form)
nop <null>
ret <null>
PDB Path PATH
xJhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
fc1e0917d6b69bc92fba4734e61a23d5
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
.Net Resources
MonitorSync.Properties.Resources.resources
HQ
[NBF]root.Data
YccZ
[NBF]root.Data
[NBF]root.Data-preview.png
No malware configuration was found at this point.
PDB Path PATH
xJhuhuhuhu
fc1e0917d6b69bc92fba4734e61a23d5
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙