Overview

overview

10

Static

static

10

42839922f8...bd.exe

windows7-x64

1

42839922f8...bd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    42839922f81de5abe87533c9ecf320bd

  • Size

    14.2MB

  • MD5

    42839922f81de5abe87533c9ecf320bd

  • SHA1

    12833ed8afeab4442f283f8e6c93fbcbbf4d84a8

  • SHA256

    3eccfb569e31e0f0d8425f1ef69db341656f427e167a4482864b5a501a3f868b

  • SHA512

    b6213888b494557e7e5c12350f520d7d636fc166dff98f493ee5ba8f2eb291d088079871abda5456107d7bb9f28854966101527543d36adc468e111a369fa7cc

  • SSDEEP

    196608:6lu/SB9ssPSSBsElKV1bIQWfjnXVnvOlRusma7glv2Xnr6swPGOkB2bilY2nw:6yg9soFplSMnF87glvQmvPlbyY

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 42839922f81de5abe87533c9ecf320bd
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections