Overview

overview

8

Static

static

7

Bypass.exe

windows10-1703-x64

8

Bypass.exe

windows10-2004-x64

8

Sharing

Copy URL Twitter E-mail

General

  • Target

    42.zip

  • Size

    4.2MB

  • MD5

    39513b771a15eaa777217eff01675388

  • SHA1

    15f8a400f5a01d38ec5e4b41bec649259cfb1a8e

  • SHA256

    34d77c3797f8ef1d100fa9fe704d9fc1ea94fc23263c7be2a69b5b25bf24010e

  • SHA512

    883bb418d6bcac14c5b64955625b98fb4a870055e66ad557a8198c4731ff91270732d54842ea5b731f39a822f229349523a175c4e8209ca4daa8625c2ca13bfa

  • SSDEEP

    98304:2tRWqDA5H/1ArHT9Hebqir6j6sXia9Fj07GC6dF4lTU8d:GoqDH9HQqYw3X5PAGRcD

Score
7/10
themida

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 42.zip
    .zip

    Password: infected

  • Bypass.exe
    .exe windows x64

    Password: infected


    Headers

    Sections

  • config.ini