Project Execution Order - (PO 546788) (PO 546789)[.]rar

Sharing

Target

Project Execution Order - (PO 546788) (PO 546789).rar
Size

13KB
MD5

39fc68f13cfd8a3cd4e280d33b2fc15a
SHA1

e41071bca23cf3c29712dd96100b552fd0727f45
SHA256

408e418404d842718d88720c6706d3a0a07f40f0e04159091ea31c7333c2f958
SHA512

ba8820e4ed7fbb841825cce9ec93ca4c52b75c6d94ef7b47d32fe3aa7ed636b1e93ece898af3975ceb6754d40b5e7d34a2fab870ca9584aba10f31fb184641c5
SSDEEP

384:02eHRRWLXPGVRB5D+/x2nUG7Yzuc2eyulGi5q:rGRRisjD+/knDYdyulGX

Score

7^/10

Obfuscated with Agile.Net obfuscator 1 IoCs
Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.
agilenet

Processes:

resource yara_rule

static1/unpack001/Project Execution Order - (PO 546788) (PO 546789).exe agile_net
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

unpack001/Project Execution Order - (PO 546788) (PO 546789).exe

resource	yara_rule
static1/unpack001/Project Execution Order - (PO 546788) (PO 546789).exe	agile_net

resource
unpack001/Project Execution Order - (PO 546788) (PO 546789).exe