General

  • Target

    Fade.exe

  • Size

    11.6MB

  • MD5

    c811cfa354c4cf5849cb9187d5038296

  • SHA1

    a5516ccd00b322d031b7f83406d8e9505f995396

  • SHA256

    2ff984a43179e40de46b16a94e764fe08ed4870daf95201ea399e73e7f20575a

  • SHA512

    5263ce1b623a6ccf26d6fac349b81d1d0c1459cc8eab2aff778d9215f7a60faf53f1c9587fbf2d928f681b47cdcce0226723760f796766b6fa5c155e93c5c318

  • SSDEEP

    196608:1FBo9KqMlOFjzUGHibZndNx8qiTDi9TS8nPOAut5uxBJuxBKrK3YmOZd0kSIgb+e:1FW0OFW1n8DuSFAutEWAam0kSpb+

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Fade.exe
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections