General

  • Target

    TFT_SERVER.exe

  • Size

    13.9MB

  • MD5

    367eed9cd88ac6c7b85d81640b028e74

  • SHA1

    4cb2fcc17d94065c44b8989c3cb83887059d552b

  • SHA256

    b28f01c902ee902205c5fd1486983991d54f5ee90024a82e4c516eede2c46ae7

  • SHA512

    cbc75068c05cbcddd9920e11aa017b0bd60cd171dd89bfa3cce4c27fdc3913e8ed9863d56b8040e2b2fcfc9e6d71ad84c2659f2a0ecc3ef21dfec5a211c582fe

  • SSDEEP

    196608:t6ST+pvtSR8WKZp3EhpLpTslFV9GeDVI5DKBWZlkgJedYs6LtYdEhqTgKDubbjY:r8p3E3pslFVkYVI5DK2NNs6LtYdEhSp

Score
7/10

Malware Config

Signatures

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • TFT_SERVER.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections