General

  • Target

    c0ab471008a11a0ad87284338e8227e379fc866131f1855f233f5e4919a99952.exe

  • Size

    2.3MB

  • MD5

    5e8b2209cb045cb86442ea395d3d83e6

  • SHA1

    b8156aa934fed6f62847ec2c2ddc4109ad7a07a0

  • SHA256

    c0ab471008a11a0ad87284338e8227e379fc866131f1855f233f5e4919a99952

  • SHA512

    bcabebe98b0b5b8ba880f857eefe28bb281003a23626cfa974f0d486e9b4aca821776ee1f8e446303fb543cb29f5237384c300db6adfd956bfab2fb8e3fc741c

  • SSDEEP

    49152:AwLMWLWc7wH2Cj5tzfk7/QUSSWrYanZdZDPyFhoxhnXqhZqezoQ:zLMU4265tzc7/BSSoYWBDEhAJqhtzo

Score
10/10

Malware Config

Signatures

  • Detects executables containing URLs to raw contents of a Github gist 1 IoCs
  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c0ab471008a11a0ad87284338e8227e379fc866131f1855f233f5e4919a99952.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections