DOCUMENT.exe
- SHA256 ca1bd575c42ce30ba0cb7bda8abfc2976c3781327c4881830b51dbc88e6eb7de
-
CoreEntity .NET Packer
A .NET packer called CoreEntity where it has embedded the payload as a BitMap object which is later decrypted.
Static task
static1
Behavioral task
behavioral1
Sample
DOCUMENT.exe
Resource
win7v20201028
Behavioral task
behavioral2
Sample
DOCUMENT.exe
Resource
win10v20201028
A .NET packer called CoreEntity where it has embedded the payload as a BitMap object which is later decrypted.
| resource | yara_rule |
|---|---|
| sample | coreentity |
CoreEntity .NET Packer
A .NET packer called CoreEntity where it has embedded the payload as a BitMap object which is later decrypted.