General

  • Target

    StartMeAfterPcRestart.exe

  • Size

    3.2MB

  • MD5

    cb0a6d1fc1b22cc1841246a13af64f61

  • SHA1

    110cb2f224b847c1615cf8be1f49116aaddde845

  • SHA256

    e4b0573b6e5626de2f4ddba652198abca7ae204136aa8c2e35581deac04c8f97

  • SHA512

    af3bfa822cc4bb7118abf24f4cdb8b9abe5a07c1a09040874bac162d8d9112e071fdfcfcb62b59b68728e12351a5b5f7d760c25ee604e1c3fe67cd5119ee02fb

  • SSDEEP

    98304:XR/zQjbxTlP9mqDQR8tnBThoKErEWCJ4KuIopKeW:XR/8nFmqERmWK9t6Q

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • StartMeAfterPcRestart.exe
    .exe windows x64


    Headers

    Sections