General

  • Target

    groozy.exe

  • Size

    5.5MB

  • MD5

    1ddad153d6efbda515d54c43b0226266

  • SHA1

    23ac94050215fc80adf61f1e6e7840caf15c2f5c

  • SHA256

    1d45f2fbcb6dfcdfebbdc73ca5fb4094f462d90312fcc36b7280a56eb97bdb2c

  • SHA512

    99387fb487fb65408be5151c3e9fa71845240314ba1cd8404aadc94e5c86845e45b0cb002a22f6ef4445fa8ae83fbf0fb2a6049b08cc62c76da2081c7f399626

  • SSDEEP

    98304:Ice8aR2x+hqMYkFx1SyBUiSH7OgseASIcw872b1f8vEd/UVA4cj/cWG41S:reexhNebbUiSH9ASjZ7S1f4g8ijj/9S

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • groozy.exe
    .exe windows x64


    Headers

    Sections