General

  • Target

    clnt_protected.exe

  • Size

    4.9MB

  • MD5

    e4b97a62596698d77bb0955ae4a8ff0a

  • SHA1

    5ae309c1819ae382745d2ad318530275522cbd04

  • SHA256

    ae5b4ec32292eb1ff6e9e523346141f87ddc8a65e0c8749bb6ad65f4a2b20db0

  • SHA512

    8d895fb00d43c5d60553fcba314d0567806ba08d44855108ab1c1c9282dac3b85a345c79590320b4de3a0b3cd671d4e6869056c6edcea147831a25a89353c69f

  • SSDEEP

    98304:MQTTPMURnkIhkDb8TruqrkXWnO9F8Be8YXNYC3WE4OILH:FTTPXnkAkDb8TaCBMF8c8G/mEQLH

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • clnt_protected.exe
    .exe windows x86


    Headers

    Sections