General

  • Target

    q0302117.exe

  • Size

    12KB

  • MD5

    4b9e1ccba95c26bf826973d346b0e468

  • SHA1

    ab0fe75bd9a10e15605b55a1b63f7e938b90a5b6

  • SHA256

    d4cce0b64f8e705189ad693758e72908452167595ea2a17c15e0dd5479abe8cb

  • SHA512

    60abbe91849bd11aee810f0da3f5392e31502969d6a457415896c88bbbccfbbbd697fb09d9a4766d76b778558cc93a21094bef9672c075f2a81c09c18cab0744

  • SSDEEP

    96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp

Score
10/10

Malware Config

Signatures

  • Detects Healer an antivirus disabler dropper 1 IoCs
  • Healer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • q0302117.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections