General

  • Target

    g7828850.exe

  • Size

    13KB

  • MD5

    27cd12082a6f90ea0e1224b4fec285a0

  • SHA1

    397e12943c6a9a66434a15fdc8573dd094b175ec

  • SHA256

    65c5244653e146f94e5ed9245ce5f3a3695514b1e56d1dd9963185b9bd2a0320

  • SHA512

    c440ed542548514e7db20f34d3a154c0144852306c7f91b729dc948ba6edadb4400861a786d484d9aa49060086cfb3a5e7ffd1646b0012268df1b6042b1b8d1d

  • SSDEEP

    96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp

Score
10/10

Malware Config

Signatures

  • Detects Healer an antivirus disabler dropper 1 IoCs
  • Healer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • g7828850.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections