General

  • Target

    ecc97a4086aec5252495ed404766e890N.exe

  • Size

    12KB

  • MD5

    ecc97a4086aec5252495ed404766e890

  • SHA1

    a9a416c84a8e5eeca2811512028b4f0e1a7ca04d

  • SHA256

    35cd44fc87ca6954e7177decee605afb0a6d9560b955c8be0dcfb13490b27beb

  • SHA512

    0bd465cea396fd706eb0eaafc6596592c710e91ec1d8f6cfb101c82ebbb04fdd3c76e0046340f9411427140223d8c4927e6e42ce3c4a998a1a5b9c715edc1fb6

  • SSDEEP

    384:vMsJTP+6OFyf/o09PSzbbVxu+Pnj1jPGUc5tuTpqKi3hC4:vMsJTP+6OFy3LdIbbhbfc5tuTpqKYhJ

Score
10/10

Malware Config

Signatures

  • Contains code to disable Windows Defender 1 IoCs

    A .NET executable tasked with disabling Windows Defender capabilities such as realtime monitoring, blocking at first seen, etc.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ecc97a4086aec5252495ed404766e890N.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections