General

  • Target

    4ab29d6bade43cf9dcfed1fe1a8b7b88

  • Size

    1.9MB

  • MD5

    4ab29d6bade43cf9dcfed1fe1a8b7b88

  • SHA1

    fcc6ed3fee5c990b09706683daffe339d2cb6f08

  • SHA256

    6692f269c98ed7cccb8f227761891da30c1c7c9fcfb6e2c1497d0024816d772d

  • SHA512

    233305b88334bf160a4bad7ec1456a7f79b9797454d2235f5fa61b26a65bc023c3ece784c48d040e54deeecdcdfe820711ff8c1fedee19f5c2326ac135650335

  • SSDEEP

    24576:l0njs3Q30dcrZCevZhMPb6qDJ6cHhjpXJ16RYgcfL/Tybv36NjhlY+GY6W4K8Yly:Mj/0HMi1f6RYgcfL/Tyb/6FDGxvn

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4ab29d6bade43cf9dcfed1fe1a8b7b88
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections