General

  • Target

    581fd04a6dd0a356620821149733624a101ee8cc1c26e08963790673c6448fa1

  • Size

    4.8MB

  • MD5

    c0f235659d6f2e2cb8420510387db7fa

  • SHA1

    671342504b48b4f9d41174900a9f0cbef0d8a8ad

  • SHA256

    581fd04a6dd0a356620821149733624a101ee8cc1c26e08963790673c6448fa1

  • SHA512

    7a9dac17df51742d7f1a907d213c95b3a022fd8ad0ca87bc8f6d814d69f5a47ee9f35b30a708975b974a8774f7dc95ca0e05319437cc0c7584ef84cd4beca7f1

  • SSDEEP

    98304:EBq5IvqNxLq1yyBcIezUgcX+ifBan9Y00DBTGiJHqLBjOoqxN:nAzBAq104RfI4H3

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 581fd04a6dd0a356620821149733624a101ee8cc1c26e08963790673c6448fa1
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections