General

  • Target

    cb31481ceeb76a7ec086e763ae8c7c852db581c6370e4dbd008db619bfd26828

  • Size

    958KB

  • MD5

    24e1c4f775d8c4d88f35d6bd98604c8c

  • SHA1

    d64fd9627426d05bc7b42c74e16be85449e0418d

  • SHA256

    cb31481ceeb76a7ec086e763ae8c7c852db581c6370e4dbd008db619bfd26828

  • SHA512

    1c01a4fd99303247b9bf7ab384eb77aa24a3ece04f43853ee6de40d7ea4c5ea54657a3ea9d779bf0aab5a25e846963e563a9fc39537fb7443a3b66c5fa71d2fb

  • SSDEEP

    24576:nPY8bgepVfD2/HyJji3MIMtPJZdGRUKmlSAupU0LeSVJWUh:P7bE+i3MJPJcYlSAupDzr3h

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

Files

  • cb31481ceeb76a7ec086e763ae8c7c852db581c6370e4dbd008db619bfd26828
    .zip
  • PI.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections