2b9cfdd264b3db3a7960ec45a6291270274b16c2d81cafa26e0082a59d50f238.exe

BENIGN

Mal-ecule

Size 708.0 KB download

First seen 112 days ago

Analyzed 95 days ago

Objectives

anti-analysis/debugger-detect PE TLS callback table present

anti-static/obfuscation Huge null run in executable (128+ bytes)

anti-static/obfuscation/binary-metrics Binary has normal code entropy (>5.5)

anti-static/obfuscation/string Long mixed-case identifiers cluster

anti-static/pack High plaintext string count

command-and-control/dropper/staging Regex component marker

evasion/indicator-removal Regex component marker

evasion/masquerade PE lacks VS_VERSION_INFO resource

evasion/masquerade/file Filename has EXE extension

impact/infect scanner word

os/privilege runas privilege elevation string

data/text/malware Malware type word with malware suffix

dylib/library GNU libstdc++ stdlib

fs/path Windows Temp directory path

communications/proxy SOCKS5 client greeting bytes

binary/section Many slash-numeric PE sections (padding artifact)

binary MinGW native wrapper for GCJ

binary/metrics Binary has 1000 or more strings

package Large binary with few DLL dependencies

binary/anomaly CLAM COFF timestamp marker

20 of 22 traits shown

SHA-256	2b9cfdd264b3db3a7960ec45a6291270274b16c2d81cafa26e0082a59d50f238
Filename	2b9cfdd264b3db3a7960ec45a6291270274b16c2d81cafa26e0082a59d50f238.exe

Source	harvest

Not seeing what you expected? Let us know