General

  • Target

    0debad.exe

  • Size

    72KB

  • MD5

    e92fc69e940652d4c19e99749cb62956

  • SHA1

    debcab8e9a30cbab65703d54e3c823ca24f74980

  • SHA256

    9a6a274ee5985bf47069276069b9c6527c808dc774677d9433322b583d6c71bf

  • SHA512

    597271b497d43b48f20e136096d0d8765f2094c06059b779bf0300b1134171024da518205e3d74eeece901dbfee3a2a9b0aed8b7be63878f53c45cefe2c86f83

  • SSDEEP

    1536:Ix9aKMNy8I+HedJTeLoqLiCYIssMiHMb+KR0Nc8QsJq39:o3xQedJKVQVAe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0debad.exe
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections