Cracked XerinFuscator.rar
- SHA256 f74b3e7170a71073b095d0a2d9b42ac9188052b1ee359efe25616a4dac74b886
Static task
static1
1 signatures
General
- Target Cracked XerinFuscator.rar
- Size 2.3MB
- Sample261012-wf87fsdv61
- SHA256 f74b3e7170a71073b095d0a2d9b42ac9188052b1ee359efe25616a4dac74b886
- MD5 65a2780958c2e5bfdd5cfdf37307a4d5
- SHA1 5e7b51bd110d57237714478f1b7e59b09f59c89a
- SHA512 ba337808037425defc9384a51bc9c9062308b2356ae2a61de0b8f54b61c753a45ab68bfda19fffe425a5f09cbc99f4a25813d1e4ccb64f62399e8b90e2f3a67e
- SSDEEP 49152:lN4SPOu6xm/zDrTUwjzNpueWNwOH5lWPMRI99N8cRf6t0k:lN4SPVzDUwPjONwuYkYMe6t0k
- TLSH T11EB533AB8BD9502DE06C39F9A4B93579F1216457EFBD1E81CBD08A081D39EC0DB0AC75
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 13 IoCs
Checks for missing Authenticode signature.
resource unpack001/Cracked XerinFuscator/Confuser.Core.dll unpack001/Cracked XerinFuscator/Guna.UI2.dll unpack001/Cracked XerinFuscator/Renamer/Confuser.CLI.exe unpack001/Cracked XerinFuscator/Renamer/Confuser.Core.dll unpack001/Cracked XerinFuscator/Renamer/Confuser.Renamer.dll unpack001/Cracked XerinFuscator/Renamer/dnlib.dll unpack001/Cracked XerinFuscator/XVM.Core.dll unpack001/Cracked XerinFuscator/XVM.Runtime.dll unpack001/Cracked XerinFuscator/Xerin.Core.dll unpack001/Cracked XerinFuscator/Xerin.Protections.dll unpack001/Cracked XerinFuscator/Xerin.Runtime.dll unpack001/Cracked XerinFuscator/XerinFuscator G3.exe unpack001/Cracked XerinFuscator/dnlib.dll
File Explorer
-
Cracked XerinFuscator.rar.rar 2.3MB
-
Cracked XerinFuscator/Confuser.Core.dll.dll 171KB
-
Cracked XerinFuscator/Guna.UI2.dll.dll 2.1MB
-
Cracked XerinFuscator/Renamer/Confuser.CLI.exe.exe 28KB
-
Cracked XerinFuscator/Renamer/Confuser.Core.dll.dll 171KB
-
Cracked XerinFuscator/Renamer/Confuser.Renamer.dll.dll 298KB
-
Cracked XerinFuscator/Renamer/dnlib.dll.dll 966KB
-
Cracked XerinFuscator/XVM.Core.dll.dll 495KB
-
Cracked XerinFuscator/XVM.Runtime.dll.dll 74KB
-
Cracked XerinFuscator/Xerin.Core.dll.dll 156KB
-
Cracked XerinFuscator/Xerin.Core.pdb473KB
-
Cracked XerinFuscator/Xerin.Protections.dll.dll 102KB
-
Cracked XerinFuscator/Xerin.Protections.pdb273KB
-
Cracked XerinFuscator/Xerin.Runtime.dll.dll 40KB
-
Cracked XerinFuscator/Xerin.Runtime.pdb73KB
-
Cracked XerinFuscator/XerinFuscator G3.exe.exe 2.5MB
-
Cracked XerinFuscator/dnlib.dll.dll 1.1MB
Cracked XerinFuscator/Confuser.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 145bfb825a224bd09d3eeb2f5bbebbda0b0a627ac35e6bc5adfef9537d46210c
- MD5 924c09ad9f409b6fd5068c5f62e9be9f
- SHA1 eec8ade5b4d4b6a5109f25d40d017dc93e397497
- SHA512 a8d91f61dc9f42af4091ccd2f3b6ad2f605ddccbd1f0c44640fb2e04a4ba38dbbc01f448e9e69c527d7bcbd642cc9417ccfee680816a37b93db29ccb4b2d0aab
- SSDEEP 3072:lA3MWa01NyoZOM5WyEdTqaCJ0b4AK3wQBjWlWz1A3fC:23T31NyooM53ENqaCJnAj
- TLSH T155044B152BEC8727DAAF57B8F474150447F2E523A5BAE78D9CC874EB1903380D6213A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
180826
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
J:\CEX\Finix Obfuscator V2\Confuser.Core\obj\Release\Confuser.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
169KB
Virtual Size
168KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Cracked XerinFuscator/Guna.UI2.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 538e6ca6001d609e251f88243409a2cbc9bc0517751843e76485a2c335e7829b
- MD5 278752062981db6fe27ba55f5099b8ae
- SHA1 8446637986cf4a24e9135ee5c54f3170600e1e83
- SHA512 142ff82ca90ca63a6a854e866615d742b585c102e8c4de5c773edeb1ac30c2cc2f6bcb190da394e4aadb4ef9518d194d99904463d6e952170d2924b16fcb00a5
- SSDEEP 49152:PQNztBO2+VN7N3HtnPhx70ZO4+CPXOn5PThDH2TBeHjvjiBckFjvkoEFB:PAhck1
- TLSH T196A5F9153DD4EE27C16ECE3796E35011E2F1A4933AB2EB0E62D35768184274978873BE
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2158494
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
mscoree
_CorDllMain
Name
.text
Size
2.1MB
Virtual Size
2.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Cracked XerinFuscator/Renamer/Confuser.CLI.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 668a0d6086e26b3cfecc9077c472daf3e417d2c73273c3059606867f524dfa73
- MD5 e2798c4db2834e114b7a4c532e8ac535
- SHA1 a9472ad70a34c49c3016acd142993c194111e150
- SHA512 085defa6dc9a8d8273374ea34d6c60965a6f3ddf1ce977468021b3cf501ed77a533221f3b4db1474684c57f0d1f4d997b13bcb4494c7d416c2b1dad52315f510
- SSDEEP 384:xBam0H3olYyfAJ9tmB7UmzAGNTXhZe8oEe98b0xeoSy/MwWjnj8VtDVth7WAl9Mg:xgmfzfAJeB7UmXNTRvoQ0jwvPVogQyy
- TLSH T1EBD21A01BBE89325D6FF2B3628F1415402B3FA976532DB4E0C89B09B5C237855963BB7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
33762
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
J:\CEX\Finix Obfuscator V2\Confuser.CLI\obj\Release\Confuser.CLI.pdb
mscoree
_CorExeMain
Name
.text
Size
25KB
Virtual Size
24KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Cracked XerinFuscator/Renamer/Confuser.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 145bfb825a224bd09d3eeb2f5bbebbda0b0a627ac35e6bc5adfef9537d46210c
- MD5 924c09ad9f409b6fd5068c5f62e9be9f
- SHA1 eec8ade5b4d4b6a5109f25d40d017dc93e397497
- SHA512 a8d91f61dc9f42af4091ccd2f3b6ad2f605ddccbd1f0c44640fb2e04a4ba38dbbc01f448e9e69c527d7bcbd642cc9417ccfee680816a37b93db29ccb4b2d0aab
- SSDEEP 3072:lA3MWa01NyoZOM5WyEdTqaCJ0b4AK3wQBjWlWz1A3fC:23T31NyooM53ENqaCJnAj
- TLSH T155044B152BEC8727DAAF57B8F474150447F2E523A5BAE78D9CC874EB1903380D6213A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
180826
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
J:\CEX\Finix Obfuscator V2\Confuser.Core\obj\Release\Confuser.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
169KB
Virtual Size
168KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Cracked XerinFuscator/Renamer/Confuser.Renamer.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 57625b7f136b683cbc343040935581f774d2a0fecda85da942603ab1285ca0b6
- MD5 ae45442bffbe39f3f894d49dc6ab3078
- SHA1 b773697582ec45bd2d1c18f3ae039bc5edbb8627
- SHA512 0f8125d38b9f9189c6d0eeff65d3e0b8a942a2ee14a9b300727fddc096b6ba4af3ddd17290f4394f1b18eb8efaa155abf198713e395b3f513570f8f74129c13e
- SSDEEP 3072:xmSRusEZl96tsxFIYuU8WO/nAP5PRjNHL46fHxgsthSv3Vok7MYZfzvFG///D:R4bzym5JhovNj
- TLSH T1D454BA1027EC336CDBF75A3DB06A896007657D27F460C38C9766A0CE8951B61DAE3A73
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
311030
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
J:\CEX\Finix Obfuscator V2\Confuser.Renamer\obj\Release\Confuser.Renamer.pdb
mscoree
_CorDllMain
Name
.text
Size
296KB
Virtual Size
295KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
980B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Cracked XerinFuscator/Renamer/dnlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 2562089caafba02fffe74207ea2fb2ba049c58852f3ac4749dc820950c1f6798
- MD5 d5192b93e33685e3099fa23689eb5e9d
- SHA1 65d5098014c676822a5d0ce134df2c9737694414
- SHA512 ee991cac25c7af7e0cc3c8344d6c541d5b4f10917464ea01a92da91cff3e7b7d139d95ae12c9820fb3bfceb6f44539d0c0849a9e594c96d473574b1bb9ef96bc
- SSDEEP 12288://K+yTp9LVy4lDpv1wsMUheWG7Bo3ygNnbzRf9juASpOSIRL4uV3N/ynYD9LUmeN:/JqpXFSsT47BontpSp6jV3NLe4+v7f
- TLSH T18A254B1237FC5B27C09E4736A03108298BF1FE59B797EB4F5650A6A66C837649C203B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
995650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Xull\Desktop\Finix Obfuscator\dnlib\src\obj\Release\dnlib.pdb
mscoree
_CorDllMain
Name
.text
Size
964KB
Virtual Size
964KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
980B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Cracked XerinFuscator/XVM.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 257be95dd0695cc93d2b617d97edf92c023a275123677a7f868b916959f6c681
- MD5 5023cc358b95e6593584093107abb8ba
- SHA1 586fac78b46dff9733a10f75e83c0886318be970
- SHA512 0357421dff4752e40453abcbb533fa9ba7757a3adb0a232f64a5f35d3736431ee70a6867dbd1896fd82bc2a3781cd2f4bff340a14b3039018b02b9ec09a6095e
- SSDEEP 12288:lpSSCjS4Wv06Z2hmphRu66dJCVI7O5sfSNgQH7+Ng6MARWch8k:lpL4WJZempW4VI7O5sfSNg2
- TLSH T1EDB4C501A7F81639F7FF8B79687A59180AF7FEC26A81D65D1950908E0C72B40CDA6373
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
512978
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\pc\Desktop\XerinFullSRCByCode2Reverse\XVM.Core\obj\Release\XVM.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
493KB
Virtual Size
493KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
888B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Cracked XerinFuscator/XVM.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a3c7e097d5806c6e9cdce2418c5949b45d53dd09ec3da443a171b9e56a41b63d
- MD5 306d6da1071615e4d3bdc756d0e1e0ec
- SHA1 bc03252514b97d6dfbe16d77ba0fe4e1461467fe
- SHA512 5c3d5f2fd226f4bc1b67210287c90bddb7fd45e5a39961fe5db8df6605832d245d65fe4b3b5908927decfc44428e237c9e269228f04c1ead7b91f3d80683e0f2
- SSDEEP 1536:yrM2qz6GWIL+W6UWnSWeyWBIWstoWHoWXIWb+ZK7x/5uLpo9tkxV+XCTGNgYPvdX:gM2qOooT0DqffDRl5Co9tki2sDndh/Y0
- TLSH T15573527C4E274E60C4ED8978DC675E0CA7F48F2598CED7B69980F0E55643AA2D132E83
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
81986
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\pc\Desktop\XerinFullSRCByCode2Reverse\XVM.Runtime\obj\Release\XVM.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
72KB
Virtual Size
72KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
904B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Cracked XerinFuscator/Xerin.Core.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 c66c5e788e29e3b13fc18fc3246046471a3c565fe49c17a0ce0294cdfa0b4fcc
- MD5 f205e41cde2da02eb6c84efd2b073b8e
- SHA1 ac2ce08fe07288bcddbcace3f571813bd4699c23
- SHA512 86ae249292c0501e2b300094ac490ca8570dfb4a3d6a2f07a3ab31ed817f25c69214d5c07292bbf922a1379ed9c48a64db2169376e16539590ac793247255588
- SSDEEP 3072:svnPOS8R47w9XhXw3kBHG1+Z5xgtBvHL5uu1ny:InPOB7Xpw+7xYLR1n
- TLSH T167F35B1827D88F12C6BF4A7EE0B8111983B4E11BD583EB5E1DD464FA2D53342AF449BB
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
165742
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Octab\Downloads\Xerin_v3.0.0.29_FULL_SRC_@Code2Reverse\Xerin.Core\obj\Debug\Xerin.Core.pdb
mscoree
_CorDllMain
Name
.text
Size
154KB
Virtual Size
153KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
904B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Cracked XerinFuscator/Xerin.Core.pdb
- SHA256 1e3d75f7060ca32a571b9d8c51a01df9a77967ec95dbc59aa0f221ddc756b248
- MD5 099367422816078f62abe24e86e758b4
- SHA1 602bdfba87ef27616de784e51a464b082c569e3b
- SHA512 d1c13460d88e102772a99e77ddeec133714cfa38ef71c533f2f7cc28516923c2d8e882b9e13e965e14890dc1007e4a3ea6f7a39a23c17064caac4566eb46409d
- SSDEEP 6144:7s/nJ1xnubT7ZHO9XT9wiSX7sLfXcYrBfpqs6hZ5LB91:A/nJ1xnAqOhZ5LB9
- TLSH T114A49366BB81CE72D166C23D5AAB5F0D9338E4860F53834F2FE4606EBDA27C51F42254
- MD5 SHA1 SHA512 SSDEEP TLSH
Cracked XerinFuscator/Xerin.Protections.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 a404d3bd74cc1cccdb3b27c36c85b58764ef345cb7f1a3506fb255ec75b19dfd
- MD5 d1f1eea95a47c30a772a20ebf0169322
- SHA1 0ed4b7843df0777912a2fe7bbfbd18e76c353af8
- SHA512 db1d969792e8b8b992108a73fe3ea5e6660a7419aa2b4b06c98c97496d3af7fd50b66a534a99ccd1d71a4388f047467b8b0fda4cab3fe0c718fcc751ff5210df
- SSDEEP 3072:07czMt3w9Y13NNeIG/U4qz+bzHoXrl73+A:0Q5ot96bz0
- TLSH T177A35B18A2E5EF46C4FF6A3AA06809680BF09247D703F7494DDA79E31D637814F492E7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
110118
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Octab\Downloads\Xerin_v3.0.0.29_FULL_SRC_@Code2Reverse\Xerin.Protections\obj\Debug\Xerin.Protections.pdb
mscoree
_CorDllMain
Name
.text
Size
100KB
Virtual Size
99KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
952B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Cracked XerinFuscator/Xerin.Protections.pdb
- SHA256 228d44304740d520d7011cd3368dfc1bc5658da36fb1a4a9b3d475b7ae84f9d4
- MD5 07e6858249529ba51cfb9516ad50339b
- SHA1 685afcfa23e8576ee86e97c7cc1951a0ce4e1455
- SHA512 3a5f9a2cd80f13cdfb250f339f925792e97c6796745fad0bf9f031d26eecee5a01dbba58e742f583e48db9586af1bb2e39d058278eae87290c951bb799e08da3
- SSDEEP 1536:c/2rMsL2SvkdrL+rQN+kP5KJniEKwIC+eFhpALx7SJ04gS9C5SDjh62J/27xIbbR:2Yu4QRcUEDIse2CIDVB8AEbnPV
- TLSH T120546155BA81EE73C4A6863D676B8F0D9338E8960F53830F2BA0B12D7D727851F43259
- MD5 SHA1 SHA512 SSDEEP TLSH
Cracked XerinFuscator/Xerin.Runtime.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 cc0ae0a5a303652240e92438f68b8bf3b1b20a81c2bf3bfe215cad237ddb09c0
- MD5 1735c849066d2c94cb1a26113334b348
- SHA1 958dae6626dfabd400a3be87cdc1b6b051528c40
- SHA512 0dcbed0b9f00bd541e36d28ef34b7bf01746a8f7b8083c53b65ab56557e8626d1ba8e156b1d1d5265258d862bef3a589ed889ff35c3b44bff03325cab2f9129f
- SSDEEP 768:byp6PZuCDB5SvEJiH/mVF8y2kkqCbBy9DcyFHj4Xfol1KV:xsCDB5CEk8cNbBWRHj4glYV
- TLSH T1C6033B0933E85945F5BEB7B5CDB596100671B9539932EA0F0EC0A0CD6A72B84CF64FB2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
46650
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
C:\Users\Octab\Downloads\Xerin_v3.0.0.29_FULL_SRC_@Code2Reverse\Xerin.Runtime\obj\Debug\Xerin.Runtime.pdb
mscoree
_CorDllMain
Name
.text
Size
38KB
Virtual Size
37KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1024B
Virtual Size
920B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Cracked XerinFuscator/Xerin.Runtime.pdb
- SHA256 9bfdc38365a2784e397f7c69910804b2596af9aea84f6a5daf056914e37a61a3
- MD5 6258f1e2d7eeeed944980095d527607f
- SHA1 a525284e055fc6e7537a0e86239224dee70088be
- SHA512 3f7ad8fce609d4fe5e584d237fb217b350d40c01920c1a900bc7bb352863b1df87f4b25f275dede699af66b6c26269cb205b94bb6291e0bb9d038f7da3f9b2eb
- SSDEEP 768:SgZdUcLBLi+t4wKqslcmRJ1ulilOojbW9MeHZmOmHU+/w1rNfNSZcxmqUU:RQ1lZjS9HhUU+/w1rZA
- TLSH T1B2731E66AAC1DE72D426833A1A775F4D9338DC860FA3970F2B94B03D7DB67C90E02254
- MD5 SHA1 SHA512 SSDEEP TLSH
Cracked XerinFuscator/XerinFuscator G3.exe
- IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
- SHA256 886bd8456ef9d406ed1069cc0cd68902dcf1438c62ad10c98e667d2250011b0e
- MD5 8134c4b6dfc1c81ca58b9d2ae968812b
- SHA1 8a1f5145274676c4cf85a77f871402cccf5028f3
- SHA512 d8737c4baea12f1667c9785acc946820bab44293c91ea039e2c32b38cb08a720907a61ddc9f4df75b0c8b993ed05d03d18d9507ec8e8d87ca64d6fe6286dffbe
- SSDEEP 24576:ePXGmOln2TIcjwsgC7o5uAU/r7o5uAU/P7L5uAU/:AG752TIcjwsguERUfERULlRU
- TLSH T15DC5B77B681CC89EE7344977C4DA9F09DA247CE0281B84C2EBE435D97EF2A9C5C4126D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
2133278
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\Users\pc\Desktop\XerinFullSRCByCode2Reverse\XerinFuscator G3\obj\Release\XerinFuscator G3.pdb
mscoree
_CorExeMain
Name
.text
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
519KB
Virtual Size
518KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
dotnet
Cracked XerinFuscator/dnlib.dll
- IMPHASH dae02f32a21e03ce65412f6e56942daa
- SHA256 bdb84aa16678189510def7c589851f6ea15e60ff977ea4c7c8c156504e6ac0ff
- MD5 3d913aab7b1c514502c6a232e37d470e
- SHA1 28ac2d1519ec5ea58b81fe40777645acc043b349
- SHA512 311e8f73c52dd65cbaf9f6e008b3231090ea99edf3471bac63cca4156a37a0d874ac590b19c01b15e05345bb6a5b636a11698bbd4e88c59c138dd3f358800027
- SSDEEP 24576:2gW20arTgWkk7z2B3Kqwf11Ot9Awr89Iv7f+NGGL:XC3o4swrY
- TLSH T105456C1177EC9BB7E0EE4737E8320A5807F2D5066693EB4F5610ABA96C833589D013B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1182782
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
/_/src/obj/Release/net45/dnlib.pdb
mscoree
_CorDllMain
Name
.text
Size
1.1MB
Virtual Size
1.1MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
512B
Virtual Size
12B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ