General

  • Target

    8b32a6092f1eb8689a87b9f046781651e41094cb83f0dd59542d0c32e718c090

  • Size

    72KB

  • MD5

    997ba37fac53e2a554391f522cfbb686

  • SHA1

    33898e4c66d4865ab44ce76316755415728f1ca4

  • SHA256

    8b32a6092f1eb8689a87b9f046781651e41094cb83f0dd59542d0c32e718c090

  • SHA512

    ae49eb1682030c2d9ccf4523f4d46177b693928fc11e3550404d38b90e2d6cc6f4dcb931a1953ba8921ed38099b6d1f004c45febaa2d6a276f980caf5e8b8850

  • SSDEEP

    1536:IgW8zis9JdneftTv59qu3udkJVyMb+KR0Nc8QsJq39:lWwKVTTqgJYe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8b32a6092f1eb8689a87b9f046781651e41094cb83f0dd59542d0c32e718c090
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections