General

  • Target

    8951741821.zip

  • Size

    3.1MB

  • MD5

    4cae3633db9a2b6ff09d77e77d2d0cef

  • SHA1

    cbacfc9826589b679f72ee6476feb71cc2501cfb

  • SHA256

    50a20d968ac12ec915b3d12d57feea7c8ce1cbc5e0ec79c678fe2194edd34d21

  • SHA512

    bfc20a284b37ad463ad1150d20429c54ce7ab8ee53ea3ffd2c18c61c4433430f8fa92a56328ef091565f3e9541a17e165b9702bfc849039c0bd061dfe521dedf

  • SSDEEP

    98304:R0NPN+muqTLKKV8tSTDHV9JpYLrZXsZ4Dca:4V92u9TDHVp+Zb1

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Files

  • 8951741821.zip
    .zip

    Password: infected

  • 130fa3b3bbb84d762e74f602a67ef5d2f9aa949ee33dd8d23fefd1cf24d931b2
    .zip
  • Setup.exe
    .exe windows x86


    Code Sign

    Headers

    Sections

  • langs/Croatian.ini
  • langs/Danish.ini
  • langs/English.ini
  • langs/Finnish.ini
  • langs/Hebrew.ini
  • langs/Hungarian.ini
    .ps1
  • langs/Indonesian.ini
  • langs/Japanese.ini
  • langs/Kazakh.ini
  • langs/Korean.ini
    .ps1
  • langs/Kurdish.ini
  • langs/Norwegian.ini
  • langs/SimpChinese.ini
  • langs/Sinhala.ini
  • langs/Slovak.ini
  • langs/Swedish.ini
  • langs/Thai.ini
  • langs/TradChinese.ini
  • langs/Ukrainian.ini
  • langs/UyghurLatin.ini
  • langs/Uzbek.ini
  • langs/Vietnamese.ini