General

  • Target

    Yeni WinRAR ZIP archive.zip

  • Size

    37.0MB

  • MD5

    12787b81c8ea472f6417628f376514d0

  • SHA1

    4e1527100069967e309741fd6b11061cc6279960

  • SHA256

    cddd6d31ed60e16cc85df0be278735593ec66b6bb6d9380d40a4ba04c4db9ab1

  • SHA512

    5cd6caea31ee2bd2dc4035cc7f341600b59e3655a16fc86ed56312dc3d6bf82da29627b97933ea2213d01a144622868c10069a9668a3e0e633d49c691955b733

  • SSDEEP

    786432:qhDpmYWpTJMHWeB6PQHNpzAdTKumQBG+fXDwXCRBhXzngnlm4GCTUZHaiCwR:K9mhHPeBIMNiwuKcXsMBh8lA5ZHpJ

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Yeni WinRAR ZIP archive.zip
    .zip
  • LuaForWindows_v5.1.5-52.exe
    .exe windows x86


    Headers

    Sections

  • Pandora v4.26+.exe
    .exe windows x64


    Headers

    Sections

  • items.txt
  • scripts/script.txt
  • scripts/xFenr8r.txt
    .js