2b1dcccb8e852df3dc5fc4d054c3d83da36cf77c6fe258cb76d38e7aa71810a7.exe

BENIGN

Mal-ecule

Size 408.0 KB download unavailable

First seen 78 days ago

Analyzed 60 days ago

Well-known

malware/worm .rsrc section present

anti-static/obfuscation Huge null run in executable (128+ bytes)

anti-static/obfuscation/binary-metrics PE code-to-data ratio below 0.08

anti-static/obfuscation/payload Regex component marker

anti-static/obfuscation/string Code section dominates file layout

command-and-control/infrastructure Binary has 4 or fewer sections

evasion/anti-av Few PE resource entries (no DIALOG/MENU/STRINGTABLE)

evasion/masquerade PE lacks VS_VERSION_INFO resource

evasion/masquerade/file Filename has EXE extension

impact/infect scanner word

communications/ip Multiple external IPv4 endpoints in PE resources

data/text/malware Virus reference

binary Resource-heavy PE with large .rsrc

binary/metrics Binary has 1000 or more strings

package GPL license reference

binary/anomaly CLAM COFF timestamp marker

binary/section PE standard code/data section

SHA-256	2b1dcccb8e852df3dc5fc4d054c3d83da36cf77c6fe258cb76d38e7aa71810a7
Filename	2b1dcccb8e852df3dc5fc4d054c3d83da36cf77c6fe258cb76d38e7aa71810a7.exe

Source	harvest

Not seeing what you expected? Let us know