48718
Packed, unsigned, embedded PE, IP C2
Blank-named high-entropy executable sectionFour-section PE with opaque high-entropy code
SHA-25684138518c0d79d23efe3acca933cba6eaf5733cecf0e62cbc7a26e49ca083c50
Evidence
0x04d5a90000300000004000000ffff0000MZ..............
0x10b8000000000000004000000000000000........@.......
0x2000000000000000000000000000000000................
0x30000000000000000000000000e0000000................
0x400e1fba0e00b409cd21b8014ccd215468........!..L.!Th
0x5069732070726f6772616d2063616e6e6fis program canno
⋯9 more rows
0xfc400000000000000000000000000000000................
0xfd400000000000000000000000000000000................
0xfe400000000000000000000000000000000................
0xff40000000000000000000000004cf90000............L...
0x100482f9000074f9000060f900003cf90000....t...`...<...
0x10142cf9000000000000b8fe0000a8fe0000,...............
0x102488fe00009cfe000066fe000078fe0000........f...x...
0x103458fe00004afe00003afe000024fe0000X...J...:...$...
0x104414fe000008fe0000eefd0000e2fd0000................
0x1054cefd0000bafd0000a6fd000096fd0000................
0x106400000000cafa0000e2fa0000b4fa0000................
0x1074fafa00009efa000026fb000042fb0000........&...B...
0x108454fb000064fb00007cfb000094fb0000T...d...|.......
0x1094a6fb0000bafb0000cafb0000dcfb0000................
0x10a4f2fb000002fc00001cfc000032fc0000............2...
0x10b44efc000060fc000078fc000082fc0000N...`...x.......
0x10c492fc0000aafc0000c2fc0000d8fc0000................
0x10d4eefc000008fd000024fd000030fd0000........$...0...
0x10e442fd000056fd000066fd00007afd0000B...V...f...z...
0x10f48afd000086fa00006efa000060fa0000........n...`...
0x110452fa000042fa000032fa000024fa0000R...B...2...$...
0x111414fa000004fa0000f2f90000e4f90000................
0x1124d4f90000c4f90000b4f90000a6f90000................
0x113476f7000092f7000086f700003cf70000v...........<...
0x1144c2f700009ef70000b0f70000f4f70000................
0x1154d0f70000e6f700002af8000000f80000........*.......
0x116414f800000afb000048f700006af70000........H...j...
0x117454f700001e010100000101000c010100T...............
0x118400000000060000800400008096000080................
0x11940c000080070000800200008000000000................
0x11a4a0f800008ef800007ef8000064f80000........~...d...
0x11b4b8f800007c0001006e00010062000100....|...n...b...
0x11c45400010046000100380001002a000100T...F...8...*...
0x11d4160001000a000100feff0000e6ff0000................
0x11e4d8ff0000c2ff0000aeff0000a2ff0000................
0x11f496ff000072f8000000000000f2fe0000....r...........
0x12040cff000026ff00003eff000044f80000....&...>...D...
0x121456ff000064ff000078ff000088ff0000V...d...x.......
0x1224e4fe0000d6fe000050f8000000000000........P.......
0x1234ba000100aa000100daf8000098000100................
⋯8 more rows
⋯5 more rows
0x51ff0068007400740070003a002f002f0032.h.t.t.p.:././.2
0x520f00300037002e00340036002e00310037.0.7...4.6...1.7
0x521f0036002e003200340037002f006d0073.6...2.4.7./.m.s
0x522f006e0064006100740061002d00620076.n.d.a.t.a.-.b.v
0x523f0074002f006d00640073006500720076.t./.m.d.s.e.r.v
0x524f00650072002e0064006c006c00000000.e.r...d.l.l....
0x525f00420056005400000068007400740070.B.V.T...h.t.t.p
0x526f003a002f002f003200300037002e0034.:././.2.0.7...4
0x527f0036002e003100370036002e00320034.6...1.7.6...2.4
0x528f0037002f006700750069006400670065.7./.g.u.i.d.g.e
0x529f006e002f006700750069006400670065.n./.g.u.i.d.g.e
0x52af006e002e0064006c006c000000680074.n...d.l.l...h.t
0x52bf00740070003a002f002f003200300037.t.p.:././.2.0.7
0x52cf002e00340036002e003100370036002e...4.6...1.7.6..
0x52df003200340037002f006d0073006e0064.2.4.7./.m.s.n.d
0x52ef006100740061002f006d006400730065.a.t.a./.m.d.s.e
0x52ff0072007600650072002e0064006c006c.r.v.e.r...d.l.l
0x530f000000000068007400740070003a002f.....h.t.t.p.:./
0x531f002f00730071006d002e006d0073006e./.s.q.m...m.s.n
0x532f002e0063006f006d002f006700750069...c.o.m./.g.u.i
0x533f006400670065006e002f006700750069.d.g.e.n./.g.u.i
0x534f006400670065006e002e0064006c006c.d.g.e.n...d.l.l
0x535f000000000068007400740070003a002f.....h.t.t.p.:./
0x536f002f00730071006d002e006d0073006e./.s.q.m...m.s.n
0x537f002e0063006f006d002f006d0073006e...c.o.m./.m.s.n
0x538f0064006100740061002f006d00640073.d.a.t.a./.m.d.s
⋯13 more rows
⋯7 more rows
0x1205000000000000000000000000000000000................
0x120600c0634000000560053005f0056004500..4...V.S._.V.E.
0x120705200530049004f004e005f0049004e00R.S.I.O.N._.I.N.
⋯6 more rows
0x120e0a2020000010030003400300039003000......0.4.0.9.0.
0x120f034004200300000004c001600010043004.B.0...L.....C.
0x121006f006d00700061006e0079004e006100o.m.p.a.n.y.N.a.
0x121106d006500000000004d00690063007200m.e.....M.i.c.r.
0x121206f0073006f0066007400200043006f00o.s.o.f.t. .C.o.
0x12130720070006f0072006100740069006f00r.p.o.r.a.t.i.o.
0x121406e000000380008000100460069006c00n...8.....F.i.l.
0x1215065004400650073006300720069007000e.D.e.s.c.r.i.p.
0x12160740069006f006e000000000063006f00t.i.o.n.....c.o.
0x12170700079006d006100720000003e000f00p.y.m.a.r...>...
0x121800100460069006c006500560065007200..F.i.l.e.V.e.r.
0x12190730069006f006e000000000036002e00s.i.o.n.....6...
0x121a0310030002e0030003000310036002e001.0...0.0.1.6...
0x121b0310036003200340000000000300008001.6.2.4.....0...
0x121c0010049006e007400650072006e006100..I.n.t.e.r.n.a.
0x121d06c004e0061006d006500000063006f00l.N.a.m.e...c.o.
⋯11 more rows
0x122906d00610072002e006500780065000000m.a.r...e.x.e...
0x122a076002b000100500072006f0064007500v.+...P.r.o.d.u.
0x122b0630074004e0061006d00650000000000c.t.N.a.m.e.....
0x122c04d006900630072006f0073006f006600M.i.c.r.o.s.o.f.
0x122d0740028005200290020004d0053004e00t.(.R.). .M.S.N.
⋯5 more rows
0x12ff000000000000000000000000000000000................
0x13000558bec81ec880000008365ec008365b0U.........e...e.
0x13010008365e0008365f0008365fc00c745c4..e...e...e...E.
0x13020433a5c32c745c836323333c745cc3236C:\2.E.6233.E.26
0x13030642ec745d065786500e8000000005805d..E.exe......X.
⋯11 more rows