Overview

overview

10

Static

static

3

Rootkit.Wi...ee.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Rootkit.Win32.PePatch.ee.7z

  • Size

    587KB

  • MD5

    ce8f7ca17635cf87b635c2a0665c837a

  • SHA1

    db16dde04c83d56febbac93992a7b22e172dc493

  • SHA256

    a38fc67a850b8712081999c0a6c1bd601e2c0cd884acbd92c6391f6793a9133b

  • SHA512

    3c18ed8e4cadb540e520859f58bae3f2d1d02602fc646845eadc450257aa1c766c0cf0f04490707e5e3b36b1f2ad443bad0d358fabb450d695950eddcebb943d

  • SSDEEP

    12288:QfT9tfVFDwOWrAWMU4ZySSfVbpaMwpAvrRQURwA6TrVdTVlED9Lu:QtfBIbd4NkVtaDAdpCF68

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Rootkit.Win32.PePatch.ee.7z
    .7z

    Password: infected

  • Rootkit.Win32.PePatch.ee.exe
    .exe windows:5 windows x86 arch:x86

    0ebb3c09b06b1666d307952e824c8697


    Headers

    Imports

    Sections