fe8e0227c82d61be0b3ccdf294982c68

PE Executable

MD5: fe8e0227c82d61be0b3ccdf294982c68

Size: 827.39 KB

application/x-dosexec

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	fe8e0227c82d61be0b3ccdf294982c68
Sha1	077d9ab9d77a79c58cbd2d9e56432d846f0d6c3c
Sha256	eafb84b57cf63dca7bbd6db5f15a003bc2eb93680049b83b9fa4b03dce382224
Sha384	c8a465027dcbebdc65178653df4cf9bb3cec2c84efb475ec2585adf37dffe1e0a7dbfb7751f6d7c3e1c8539f19ed9968
Sha512	43542fa8bbfdaf7568a7f33718af901307a2d6c6a12ed9317e6531fba21ea71c3e93b49a60cdb9e5048b4586dca915706fa656f33a11a36435a3aef4348a01d6
SSDeep	24576:fB23C6Q5fRHY0rZ3CiYGW4D3qbj3fEpor:f83SRHYQ3CfQ6HEp
TLSH	4B0501D72605C706CCA97E744CE2E3B9D366DE8DA411C30769E6FEEB393AE40255C182

Name	Value
Module Name	XSR.exe
Full Name	XSR.exe
EntryPoint	System.Void SimplePaint.Program::Main()
Scope Name	XSR.exe
Scope Type	ModuleDef
Kind	Windows
Runtime Version	v4.0.30319
Tables Header Version	512
WinMD Version	<null>
Assembly Name	XSR
Assembly Version	2.0.0.0
Assembly Culture	<null>
Has PublicKey	False
PublicKey Token	<null>
Target Framework	.NETFramework,Version=v4.5
Total Strings	84
Main Method	System.Void SimplePaint.Program::Main()
Main IL Instruction Count	10
Main IL	`nop <null> call System.Void System.Windows.Forms.Application::EnableVisualStyles() nop <null> ldc.i4.0 <null> call System.Void System.Windows.Forms.Application::SetCompatibleTextRenderingDefault(System.Boolean) nop <null> newobj System.Void SimplePaint.FrmMain::.ctor() call System.Void System.Windows.Forms.Application::Run(System.Windows.Forms.Form) nop <null> ret <null>`

PDB Path PATH

XShuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

No malware configuration was found at this point.

PDB Path PATH

XShuhuhuhu

fe8e0227c82d61be0b3ccdf294982c68

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

You must be signed in to view YARA rules.