Exes_fabfd9f7ea28140e365fb7161101a814_exe_2019-07-09_06_30.txt

* MalFamily: ""

* MalScore: 2.6

* File Name: "Exes_fabfd9f7ea28140e365fb7161101a814.exe"
* File Size: 1880576
* File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
* SHA256: "46cee6d38853f4a7fb02cc9753d51768a6328f2a5b6bf9cbb2b19d406d0a405a"
* MD5: "fabfd9f7ea28140e365fb7161101a814"
* SHA1: "d383bb229813bb83ae1e4bc5bd052d485e0342bc"
* SHA512: "ebc9f19fb89e9b732a45a2e1b9768f5db957de56c6c287190a7a6bb7256c97201c32cdf97c352ac5dea2a482c2b33bd8e898260232312a75d71e070bf1248516"
* CRC32: "9104B9E9"
* SSDEEP: "49152:8h+ZkldoPK8Yab/4+bjdW2g8T5YTzlWf1rK9T:t2cPK8xg+bjdW2gZTxWtrK"

* Process Execution:

* Executed Commands:

* Signatures Detected:

        "Description": "The binary likely contains encrypted or compressed data.",
        "Details":

                "section": "name: .rsrc, entropy: 7.82, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ, raw_size: 0x00100c00, virtual_size: 0x00100a1c"




        "Description": "Anomalous binary characteristics",
        "Details":

                "anomaly": "Actual checksum does not match that reported in PE header"





* Started Service:

* Mutexes:

* Modified Files:

* Deleted Files:

* Modified Registry Keys:

* Deleted Registry Keys:

* DNS Communications:

* Domains:

* Network Communication - ICMP:

* Network Communication - HTTP:

* Network Communication - SMTP:

* Network Communication - Hosts:

* Network Communication - IRC: