HEUR-Trojan[.]Win32[.]Agent[.]gen-d76378c46181b98e5aae1b8d2df6d1dea8f91ec621169c7c01d106c1588d1dd5

General

Target

HEUR-Trojan.Win32.Agent.gen-d76378c46181b98e5aae1b8d2df6d1dea8f91ec621169c7c01d106c1588d1dd5
Size

1.8MB
MD5

f0b7f93fafb77810bea9ed9c7f2c3799
SHA1

923a5367ab62b16746dfc4d05d6b158cf19da2a4
SHA256

d76378c46181b98e5aae1b8d2df6d1dea8f91ec621169c7c01d106c1588d1dd5
SHA512

bc8010d4c18dc507666f9c02e66b9522653621794ae3b744f44bcb19441a72b04f819c534623b834e3c3cc16546f432ddb92bd3978a628600a62017a1f0dc296
SSDEEP

49152:Y46qaa9URj3PabquasPGliAuvaDJvG0uBvdByL:Y46HsURL8qpkpkJ1AvdB2

Score

10^/10

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
HEUR-Trojan.Win32.Agent.gen-d76378c46181b98e5aae1b8d2df6d1dea8f91ec621169c7c01d106c1588d1dd5