General

  • Target

    PCELK.bin.exe

  • Size

    3.1MB

  • MD5

    b0cb207a394bc5a5a6a987a56ec7d5ad

  • SHA1

    02937cec5f8f82427b033d31225aa746dd9750c4

  • SHA256

    fc29f52e495390630ccda0c1071af6a811eeae68ae7d7cee5de58bdc02f00b61

  • SHA512

    c363b7bd27fb87460e6fb656dec74ca8cde7febc1e43e86fe56a702edbc74362b701856580e43891d50250a835638c396cf329e92c503408cc397da25be1b679

  • SSDEEP

    49152:vLk//TBWXW0BIJ9GyRiwbMws9DnxsqXG02M1KY7Z4sXRuk:vLU/uWUIjGyVMwiLCaZVYk

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

Files

  • PCELK.bin.exe
    .exe windows x64


    Code Sign

    Headers

    Sections