General

  • Target

    csrss.exe

  • Size

    5.1MB

  • MD5

    f3d969f5f4a4977a968808844234b7c4

  • SHA1

    f51cee9cd3cbd703280d837555fda673e17c25fc

  • SHA256

    dd81cd7153f636bd0ce9c1f8f90c10c014b4c47fc937ab271d720b502ec81722

  • SHA512

    4d41e1984cbf755c98d02ac14cd67d0cecc6d02e20b0e929d1931d9078c05e76d4f3d349257a0ea2c16d14d712a6fd4bc47ea3ad84c6399ac926144934b0ca04

  • SSDEEP

    98304:kyEwOTWOhGI1yXsXkd7GnHNovA9qOxBWJizLzdnT6WPU7MBkNK/H8kXGa:HEwmGI1yskdaHNaeqIzd7c7/NQ8X

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • csrss.exe
    .exe windows x86


    Headers

    Sections