General

  • Target

    3d04b9a30bd7c3f35f566853e0721081b0df31f7dc95ecdb8a91ec604ecc85a8

  • Size

    886KB

  • MD5

    659115a79a93e2ea0aee2b2c89235357

  • SHA1

    00663297f373117592185b1821b4b258ba74cdf3

  • SHA256

    3d04b9a30bd7c3f35f566853e0721081b0df31f7dc95ecdb8a91ec604ecc85a8

  • SHA512

    062caa9e8081300f0c26044397f6ca2cd6591807c157553b379979db7f0405ef75f413690febd7dfe68eb6db211d8c527c0bea0fdf3615c04d3505339b1a76c7

  • SSDEEP

    12288:vU4XEmxjd98njOnvZrGlgLaMU3oIAx62kx8UsiU0nbNq3:3h98njSvZrVO93oIAI2kx8UTvnbNq3

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3d04b9a30bd7c3f35f566853e0721081b0df31f7dc95ecdb8a91ec604ecc85a8
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections