General

  • Target

    notepad.exe

  • Size

    7.7MB

  • MD5

    5dc898e0f4a504cf08b3bf1121108cfd

  • SHA1

    ebccf6c07546640bcd6db32d99cf3e1a30a415c9

  • SHA256

    14cd22fbf91e4e47cd635359460b65f57ebc39b68956db35b55090890b4a2dcf

  • SHA512

    a0ef35d1f21ef2703c27946a57830db25b6ad7f8d01d4439021887f82198d07a4f62417c99590deb29d0c9ea4028d84f72ee37955653f63f57dfe37c90b0db02

  • SSDEEP

    98304:BiB2pC6XG4HNkq5UKPhc24Y1/QPldHVTgPNhV0ADXqQgpkWDRIZVMnu0jjD8ueJY:hcUG4raKu24YY7HVT4hV0AD6QgqKRgX

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • notepad.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections