General

  • Target

    209f83f34903c8db51f8ea1b54c8f0093b612447d31908bac081372377d89c06

  • Size

    11.8MB

  • MD5

    eb7c879f11b54f291ce0126d62dcf341

  • SHA1

    a14c6530b24916eea2bd2237b790a338df6a7bea

  • SHA256

    209f83f34903c8db51f8ea1b54c8f0093b612447d31908bac081372377d89c06

  • SHA512

    c453c588b9f5f522ccc2f42e255f68ff38e984810def9ec4c6ee50b6407ac19df8994698120b3482dd29f3425f0e9d36afe872e0093306c804ee88c4c16ac9ce

  • SSDEEP

    196608:CSQSap4bqiip34pkr2dY/aBcjJOBHOBIQBajMtWvoJiLE1+XgRKz89G/4ZSb0Fu5:wkqiiKpkr2dY/aBcjJOBHOBIQBajMtWb

Score
10/10

Malware Config

Signatures

  • Blackguard family
  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 209f83f34903c8db51f8ea1b54c8f0093b612447d31908bac081372377d89c06
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections