General

  • Target

    redacted.jpg.zip

  • Size

    1007KB

  • MD5

    1853d743a3ec59cec0e520bffefc1b9f

  • SHA1

    f2e10461d3e0b76c0e0b82ae1d9fd6d706c660b7

  • SHA256

    eba2a259c218ff825fed47dcab8f902340abc3b73f9d69eb94f74911005d9e5e

  • SHA512

    7ba1ce7fdc25e62b001f1ac41746f049b1caf9f7b41cc97ec57a35e9a915c449290a464f80afdf65903ba003cca96adbbf3dd367bf35a8b0e573520ece3b1f98

  • SSDEEP

    3072:Big0pfJPF+7pxVqrZPxpRcPFpdBpKtEgCy/XWCkqnWgA+IS21IOZ:BidB2x86PEv/XQP++XZ

Score
10/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

Files

  • redacted.jpg.zip
    .zip
  • redacted.jpg.scr
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections