General

  • Target

    BuffMail.exe

  • Size

    20.9MB

  • MD5

    bddaeecc297315b3ac45b976104de3f3

  • SHA1

    331d9ba038219705df1babf786da9c58363df18c

  • SHA256

    cda19556b983fb6f5e037be6e6608eb5a2d53f606878ffb93e46bee3cccc6900

  • SHA512

    465111ba787fe60cac1780f146f152603ca1366f0875bdd5d545e4a62ace57614e664f6850b0ed82102ec042d5cfedae99fd8f63535f8d230de327bf73556fed

  • SSDEEP

    393216:Yd3TptnIVZd7p9mdLt/WVi0teZKwnOEGL26VjSQS6yY9:QDDGL7p8dai06KRq6RSH6yY9

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BuffMail.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections