General
-
Target
csrss.exe
-
Size
3.6MB
-
MD5
66a0fdf5f6c0e18a23266e690119ae86
-
SHA1
91e169695bb18e2d56a86089121b5f18a24f6de0
-
SHA256
3987e1ee8a5a39f2508fec9ad8790da21a0fe5d1217ca36268b903e49877d63b
-
SHA512
7db2048c70a2716c7939920066ad215fffe866842e4236e46daae0e997901c4b82512082db18adc16f9890b4f45ac10f410aa534a10d4bf01ed11d803ad7d051
-
SSDEEP
49152:iLDYlAuLibTacTvl5nGR+S5P9b+F2HNFuqagTLVjdWgsIC86MVRRX8R1c5sZg9E+:iLDYljcTBGHSqjtp+etsR1xg/EC
Score
7/10
Malware Config
Signatures
-
Themida packer 1 IoCs
Detects Themida, an advanced Windows software protection system.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
csrss.exe
Headers
Sections