General

  • Target

    g1838117.exe

  • Size

    16KB

  • MD5

    a3269e34f0c7b54364305e0b87f4b00e

  • SHA1

    f700e30d0cc00cb2bc7392a47bb744cbd4751e99

  • SHA256

    304e3bf665908d97dc964dea05af7a709e2c8964e8f4fa7c585edb059eafb9be

  • SHA512

    28b3df7d02775ae985c0d5c53a527bdfa748fe304d50e955755e6215a969172e7f67870703815f31a99bfd7d53c57f3399ba1f408c1f62a0bef82ce3c4de5bbd

  • SSDEEP

    96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp

Score
10/10

Malware Config

Signatures

  • Detects Healer an antivirus disabler dropper 1 IoCs
  • Healer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • g1838117.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections