7e969ec78579e242e08ff49e7e7b8818fcc8e5925f922f4171d6e244a25754a8.exe

BENIGN

Mal-ecule

Size 916.0 KB download

First seen 111 days ago

Analyzed 94 days ago

Objectives

anti-analysis/vm-detect Regex component marker

anti-static/obfuscation/binary-metrics Binary has normal code entropy (>5.5)

anti-static/obfuscation/payload PE version resource text

command-and-control/infrastructure Binary has 4 or fewer sections

evasion/indicator-removal Regex component marker

communications/http/client WebClient.DownloadData method

data/db LINQ query operations

data/encode Repeated 64-char uppercase hex blocks

data/serialize .NET runtime serialization namespace

communications/http/server Modification of HTTP context items

file PE with many SHA256-sized hex blobs

binary .NET Metadata Root (BSJB)

binary/metrics Binary has 1000 or more strings

binary/section PE .reloc section presence

dotnet .NET assembly detected via BSJB CLR metadata signature

dylib::mscoree links mscoree (CorExeMain)

hardening High-entropy ASLR (64-bit)

lang/compiler mscorlib reference

package Large binary with few DLL dependencies

binary/anomaly PE version info numeric fields present

20 of 41 traits shown

SHA-256	7e969ec78579e242e08ff49e7e7b8818fcc8e5925f922f4171d6e244a25754a8
Filename	7e969ec78579e242e08ff49e7e7b8818fcc8e5925f922f4171d6e244a25754a8.exe

Source	harvest

Not seeing what you expected? Let us know