General

  • Target

    Yams_Services_Paid_Spoofer.exe

  • Size

    3.5MB

  • MD5

    4c7e334ed4d23b0e3cf108b478348207

  • SHA1

    bdaf9e1457ad07e31a866e51af342a0c8f05e9f5

  • SHA256

    af90c53041bac1cbc4adc7b3748339100028de94876213b3ade6893ba42d6240

  • SHA512

    1c02d38999ec07c19e3802673ba64135f7c05fcb1611c7597815eb80a86822678aef25e6a51287bc2ea6ad56b8cd5109197d224915435105144d3ea986e096c3

  • SSDEEP

    98304:mN4QlieHre5arkJRFt6c2nybntTFpElY1oqbFpEAFY:mPliyreBv+c2nybTpEluXwAu

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Yams_Services_Paid_Spoofer.exe
    .exe windows x64


    Headers

    Sections