General

  • Target

    csrss.exe

  • Size

    3.8MB

  • MD5

    92e7f334d8a30300f09140ef19153de2

  • SHA1

    452657fb8d77847f693c8b7b62c6ac756ab77daf

  • SHA256

    41338f858938da50b6705683ef7617065378f90b5a5be30105cf5e10f40d6adb

  • SHA512

    207539310027155a420ff0404469173de3c6531aa17c263b678f6ebebfd44fe675d89dbd6a9a5e3cf85d470cc7f66b1f91efc8a27064160ad11536ff3fac7098

  • SSDEEP

    98304:eU1KQNS4l139BFTfh+rEZpg7HWnZXNN48HO1:91KLs9cEY7ONN48u1

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • csrss.exe
    .exe windows x86


    Headers

    Sections