08e2b0e469f2809991e59e65177fe994f3aeeea601a2af8aec6c7ae1406debb0.exe

BENIGN

Mal-ecule

Size 759.0 KB download

First seen 107 days ago

Analyzed 89 days ago

Objectives

anti-static/obfuscation/binary-metrics Binary has normal code entropy (>5.5)

anti-static/obfuscation/payload PE version resource text

command-and-control/infrastructure Binary has 4 or fewer sections

evasion/indicator-removal Regex component marker

evasion/masquerade/file Filename has EXE extension

evasion/masquerade/identity Two dotted-quad version strings

evasion/process/injection Regex component marker

communications/http/client .NET SOAP HTTP client class

communications/http/server Modification of HTTP context items

build Manifest is MyApplication template name

encoded-payload Encoded payload detected: hex → base64

binary .NET Metadata Root (BSJB)

binary/metrics Binary has 1000 or more strings

binary/section PE .reloc section presence

dotnet .NET assembly detected via BSJB CLR metadata signature

dylib::mscoree links mscoree (CorExeMain)

hardening NO_SEH (SafeSEH not used)

lang/compiler mscorlib reference

package Large binary with few DLL dependencies

binary/anomaly PE version info numeric fields present

20 of 39 traits shown

SHA-256	08e2b0e469f2809991e59e65177fe994f3aeeea601a2af8aec6c7ae1406debb0
Filename	08e2b0e469f2809991e59e65177fe994f3aeeea601a2af8aec6c7ae1406debb0.exe

Source	harvest

Not seeing what you expected? Let us know