General

  • Target

    Payload.exe

  • Size

    5.3MB

  • MD5

    743e15053b7f0a2316243bce256af71a

  • SHA1

    869eadce3b5bcce39e9871d03b6f46a114d9c14d

  • SHA256

    85373f3c946e25ddf96025f0674cef4ac8491a167598295f6a0c85e461b610cd

  • SHA512

    35b557e0e10a600f1f5b69458107574ae0f0d7210cad4abdf067c414d89f1739f9222fe3fdf39ebb77a206cf541769132ee56b0d0acbb454986ab54693d40630

  • SSDEEP

    98304:wNN/N91h2eDZQjL7sU8I5DKBWoClkRGJewd8Y3evBQ9LtYVrEx3/o6ETgKbWyu:C9GeDVI5DKBWZlkgJedYs6LtYdEhqTgY

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Payload.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections