General

  • Target

    cb202512b3c31bd766f06ad9db4fea1283b736350a93f96d321198c1059b9ac7_JC.exe

  • Size

    550KB

  • MD5

    020156cfb0ef4dd8a7f4b5eb36482d80

  • SHA1

    cc181d87e5d1ac492ff25ad788bc5ed61cb7df6e

  • SHA256

    cb202512b3c31bd766f06ad9db4fea1283b736350a93f96d321198c1059b9ac7

  • SHA512

    2c7ba81cf0b3d82d1a00ca63a4aed01cd8aed01e72523276bfd175ea5096ca88bc8524d1b3be91cfed60288853df342561c0873438a275be6a9bfac2354e12d7

  • SSDEEP

    12288:QOTMpuF8lLWTjHuJm6/p4mTu3DiUyT7LBgyg7emhYpkNJndkCNWjkhowyMwOZWYG:zPzD0B

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cb202512b3c31bd766f06ad9db4fea1283b736350a93f96d321198c1059b9ac7_JC.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections