Resubmissions

22/08/2024, 14:25

240822-rrpjzavajm9

21/11/2022, 08:25

221121-kbabsabc549

General

  • Target
    9c267d6fa78174b3cba8ac8de558d83a97efb8494ba1c675f1493cb41133a897.exe
  • Size 7.1MB
  • Sample221121-kbabsabc54
  • SHA256 9c267d6fa78174b3cba8ac8de558d83a97efb8494ba1c675f1493cb41133a897
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

File Explorer

  • 9c267d6fa78174b3cba8ac8de558d83a97efb8494ba1c675f1493cb41133a897.exe
    .exe 7.1MB

9c267d6fa78174b3cba8ac8de558d83a97efb8494ba1c675f1493cb41133a897.exe

  • IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
  • SHA256 9c267d6fa78174b3cba8ac8de558d83a97efb8494ba1c675f1493cb41133a897
  • MD5 SHA1 SHA512 SSDEEP
  • Obfuscated with Agile.Net obfuscator

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

Minor OS version
Major OS version
Entry point
7346386
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths