General

  • Target

    335942ff9bf94bc829ccfbfbc0a3d481a36bf880eb354d82265eaca350ae212e

  • Size

    11.2MB

  • MD5

    245aa02c169abc627da28e7b3dc0e3e0

  • SHA1

    44460ccc4fd0fbd32515a3afd7677001b29c532a

  • SHA256

    335942ff9bf94bc829ccfbfbc0a3d481a36bf880eb354d82265eaca350ae212e

  • SHA512

    26f8468317958bd3976c1f1c1719172890905cd1558b2aa58d0e2699ae8b7468b241ae230df37aa27d22245e570838354920b6ab5afb261087cb8da5f4c715be

  • SSDEEP

    196608:jcFYfyUULoYyyAzMcGGtF2AsSZxhuT4FoSRCU:QFxUULoYyVMcGGQUFoSB

Score
9/10

Malware Config

Signatures

  • CoreEntity .NET Packer 1 IoCs

    A .NET packer called CoreEntity where it has embedded the payload as a BitMap object which is later decrypted.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 335942ff9bf94bc829ccfbfbc0a3d481a36bf880eb354d82265eaca350ae212e
    .exe windows x64

    c7d3c724d93ab379982693ee9624fc0e


    Headers

    Imports

    Sections