General
-
Target
WPBE1877.exe
-
Size
498KB
-
MD5
fe9db7933ebf3259b7e03cd0cee913cf
-
SHA1
071e14a82d9e5ee7f53d01ef86ddb5739fb03471
-
SHA256
bde6705bc56984fab54311198daaa4d44741a4e6805010d9830bf0fdf02c84ec
-
SHA512
4f10ae2d636ce4392ebb3b8ef52bd8cd9e1d32a6f9f5eead59bec1b9913137ea6b1a7a09b4fe0555abb6f5676d02f0805ac524da8c88a21544913a822d824341
-
SSDEEP
6144:gKoUOOEsBtk3FmS+51IbWrFmS+51I9WarGOrT89xp20CoFli60m:+UO+7iFmS+5ibWrFmS+5i9WaaOex86L
Score
7/10
Malware Config
Signatures
-
Obfuscated with Agile.Net obfuscator 1 IoCs
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
WPBE1877.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections