Overview

overview

3

Static

static

3

13-av-evas...le.bat

windows7-x64

1

13-av-evas...le.bat

windows10-2004-x64

1

13-av-evas...xor.py

windows7-x64

3

13-av-evas...xor.py

windows10-2004-x64

3

13-av-evas...ad.exe

windows7-x64

1

13-av-evas...ad.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    8ab1ff5ad1e89b9ef913f5f15ad52857cd56251d39178bf72ccc7d371d6bb761

  • Size

    50KB

  • MD5

    38044442498ccf5e1118778787acc71f

  • SHA1

    b422e53b19f563bb168346a73e173bd4ece3f4a2

  • SHA256

    8ab1ff5ad1e89b9ef913f5f15ad52857cd56251d39178bf72ccc7d371d6bb761

  • SHA512

    38719b37e5bf1e98e01201d7594badf1a699e556d96cd66be9fd14082ee4e43f0251ef2e925daea3c7cc5815b47aedc693881123a0a77d45a74113df5c5dde07

  • SSDEEP

    1536:z/xrU7ABdm45APmvvL8l+ngDfJsBPKwuHWHaHhdY:rxJdm45AeDS+NBPKwGWHShu

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8ab1ff5ad1e89b9ef913f5f15ad52857cd56251d39178bf72ccc7d371d6bb761
    .zip
  • 13-av-evasion/compile.bat
  • 13-av-evasion/encrypt_with_xor.py
  • 13-av-evasion/msgbox.bin
  • 13-av-evasion/msgbox.ico
  • 13-av-evasion/resources.h
  • 13-av-evasion/resources.rc
  • 13-av-evasion/rsrcpayload.cpp
  • 13-av-evasion/rsrcpayload.exe
    .exe windows x64

    5ff1227c6b497734ce7f4dd230c33c1a


    Headers

    Imports

    Sections