General

  • Target

    q3049712.exe

  • Size

    14KB

  • MD5

    6e729cd67e73459385419449be70358e

  • SHA1

    39e83cf6ff2a60deb8713df7f1e4705931bed89d

  • SHA256

    5632bd1a4d9754ba2ff125424bfbc9f2924d5136d08d031e0718c186d9ab19ab

  • SHA512

    e805ddb2740ae72e70a0e7cd2a41ac4b7135b6244e316f764520d411a55b14413fa170d9c15c2d78a5e3eabc5bba4188c553734965aa0759e5bad74301094757

  • SSDEEP

    96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp

Score
10/10

Malware Config

Signatures

  • Detects Healer an antivirus disabler dropper 1 IoCs
  • Healer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • q3049712.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections