General

  • Target

    Payload.exe

  • Size

    62KB

  • MD5

    e6578094658fd027144728a35bac1938

  • SHA1

    0f7ed46cf7c3c747e3639b7d021b5f9f568065dc

  • SHA256

    16662ddf0ac809abd5f36212081e95e78f94963511283a225e76d8332e6a72a6

  • SHA512

    27da66e40ea0a0d45da6123cf2a229fb8407c05a9f2fbb02ae9c87166451b4192522e37841249d2d0228cc824b49a7ab7433d3d9ce677bbd18d033deecd17903

  • SSDEEP

    1536:NkG18mcM8NqNFwvbR5id9JFNFm3vjWd0V9qN9Ps:B8mcM8NfvbQdNc3vDn

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Payload.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections