General

  • Target

    q1851358.exe

  • Size

    14KB

  • MD5

    2b33dc9f94f0ff1f1a2b4ec50ceddbf5

  • SHA1

    2c154597c5696c4a493271eaeb6dcf714b256a79

  • SHA256

    32aa2648cc29a5aa6abce6fc9203434ac5b772b7f7f2a1a725a82dc2b0d79aa2

  • SHA512

    9e60fe795628173828490c721f52b3ff186e69383958f5671a6b9985c6ebcfc623d959d46403c5a98455257cb6140e28ceca2f99af331ca20809b54e08292189

  • SSDEEP

    96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp

Score
10/10

Malware Config

Signatures

  • Detects Healer an antivirus disabler dropper 1 IoCs
  • Healer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • q1851358.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections