General

  • Target

    DBNote - CRNote - MBL HBL KGNSA2212999 SHIPPING DOCS.exe

  • Size

    5.2MB

  • MD5

    20eab12cfae51f007942bbddacd333cf

  • SHA1

    cfb86f23efce6b3bcc9aea05b1e930f387728a6a

  • SHA256

    d957e02ba9bfc1670127d3ce98fd09b41c49d13ae6a7abb4889d88cb5f9b5ed4

  • SHA512

    12d1cfa0e4aff8d598716d8715d242a2f518d392a31e05f9e118c301b7060b9e90819e6f063aa00f3bb2ecdc50883b2651ae33d579d46e8b124ded879e898b46

  • SSDEEP

    49152:/aTh3GvrpJaSp9Jdyzs8PR0SOIxp3CQXpbi45tjPeE27fYb:/adGvrpJaKYzs8PtOIPCQZbJ5NXwYb

Score
10/10

Malware Config

Signatures

  • Darkcloud family
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • DBNote - CRNote - MBL HBL KGNSA2212999 SHIPPING DOCS.exe
    .exe windows x86


    Headers

    Sections