General

  • Target

    79491ad69bcd844625a1d3f79678123137f93e8bf639898b27f2941ec6474d69N

  • Size

    72KB

  • MD5

    c00201cb205fb7343e267606e7d07990

  • SHA1

    a5f14930b83aa1b72a89df000529841481df6f9d

  • SHA256

    79491ad69bcd844625a1d3f79678123137f93e8bf639898b27f2941ec6474d69

  • SHA512

    0ae9a23f372db1337783c2b389f4581a211a5f49d044b10d0228456f673c6cc8044c292a23d817af9877fdacb1e36735d46c7a0ccbcf314ff23d3b760c88593c

  • SSDEEP

    1536:ILcp7gPIKhF9/IJAAfVIA+JgFdUNJeUMb+KR0Nc8QsJq39:2cGAKhF90AAfQcdUyUe0Nc8QsC9

Score
10/10

Malware Config

Extracted

Family

metasploit

Version

encoder/call4_dword_xor

Signatures

  • Metasploit family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 79491ad69bcd844625a1d3f79678123137f93e8bf639898b27f2941ec6474d69N
    .exe windows:4 windows x86 arch:x86

    481f47bbb2c9c21e108d65f52b04c448


    Headers

    Imports

    Sections