General

  • Target

    126db18bbcf58a186b422970c57e4dbf.exe

  • Size

    3.4MB

  • MD5

    126db18bbcf58a186b422970c57e4dbf

  • SHA1

    97246ee3686052bb9e1142ac789b421b1bb067cc

  • SHA256

    85693616d48b2266134fccd7197503d7da7d317c318016ea0f988c414a10e756

  • SHA512

    59a58b17323329286bfc85d410fb7d269f6df82d05fc603871ac4f3440e4cf36e5e4f3a5f19a410fa7f9b4c23785bf38440396e847bb1d87611c2551a12fbca6

  • SSDEEP

    98304:8lNBB6cnUQdlK0/T1wDiZuDWCMczXPZiAQFOlmmbK:PcnVlx/pTb1FOlmmbK

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 126db18bbcf58a186b422970c57e4dbf.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections