DisableWinDefender-main[.]zip

General

Target
DisableWinDefender-main.zip
Size 1.6MB
Sample240623-bnb7gaxeql
SHA256 4222aeb120db93448bf5dfe1356523951c95f14ea038ac1076973d8997c7e0eb
MD5 6b937fdb70fb65ee51e5f1dc19c6dc8a
SHA1 a91b7def79b3425d1d0ec8555ad463237537e392
SHA512 cd10d5698e7c8cab2fe967c20c2d4192620eedda64549892130d13620984b29e81c2aa078e7fc6e29178680dfea28f0d2163d95fb954ff50291286a2e2bde5f2
SSDEEP 24576:hHQzyImz3rzA80r8y10zLf6gvS82rt2JzgbltJPRaXDbfDKafuwAQ/MemrYrf/4:hHQGIkzA80r83LV7ebltJP4bPEb
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/DisableWinDefender-main/DisableWinDerfender.exe

File Explorer

DisableWinDefender-main.zip

.zip 1.6MB
DisableWinDefender-main/DisableWinDerfender.exe

.exe 1.6MB
DisableWinDefender-main/README.md

2KB

DisableWinDefender-main.zip

SHA256 4222aeb120db93448bf5dfe1356523951c95f14ea038ac1076973d8997c7e0eb
MD5 6b937fdb70fb65ee51e5f1dc19c6dc8a
SHA1 a91b7def79b3425d1d0ec8555ad463237537e392
SHA512 cd10d5698e7c8cab2fe967c20c2d4192620eedda64549892130d13620984b29e81c2aa078e7fc6e29178680dfea28f0d2163d95fb954ff50291286a2e2bde5f2
SSDEEP 24576:hHQzyImz3rzA80r8y10zLf6gvS82rt2JzgbltJPRaXDbfDKafuwAQ/MemrYrf/4:hHQGIkzA80r83LV7ebltJP4bPEb
MD5 SHA1 SHA512 SSDEEP

DisableWinDefender-main/DisableWinDerfender.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 0e5949c7742e2ea76adfce592a40a11bf0c80837ebbfd978424ab2eab59e19ac
MD5 56bb3b4f841eaf71d47b1afd9a1c2dd4
SHA1 e75579243d48d43bc945ccd7032022ba015df0fd
SHA512 a7125443c57f54584646e0e99069c92a312b3f5285e8acbee4c64a0efc604298b3c8d67e5cecd33ee4df7301152b831708ce57fa54ee51e47f9646348e44d7b3
SSDEEP 24576:B0ro3iSgD3TxIIQrQgZ0pjfuy32MmVd233gBxhJ/RQXRbPXoer8QAYlM+m/YXf:SroySuxIIQrQPjNrmBxhJ/Ybji
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1678126

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

DisableWinDefender-main.zip

DisableWinDefender-main/DisableWinDerfender.exe

mscoree

dotnet

DisableWinDefender-main/README.md

Sharing

General

Malware Config

Signatures

File Explorer

DisableWinDefender-main.zip

DisableWinDefender-main/DisableWinDerfender.exe

mscoree

dotnet

DisableWinDefender-main/README.md