General

  • Target

    q0603873.exe

  • Size

    18KB

  • MD5

    181ddf57b921b1b931a4761784bd70c1

  • SHA1

    4ff15c0b05e688f889753bd68e6f85cbad844a4c

  • SHA256

    28b494f9e30ef587efa25bf711f45c38e4b54e396c868dcc51d3db3d37f4b9ba

  • SHA512

    2317ce805959e0ba9cf5b4d6e561afbcfbaeb76a0c8581cc2f840d9c0c0b9b2ff7d24417f805c502ba7558e2e8c9b90f6068610c6e0da46680d640aa8935cf82

  • SSDEEP

    96:yA/vMth9sDLibql3A44P9QL4fwmPImg+A03PvXLOzk+gqWYV4J6oP/zNt:yw+wGWt94+iANiCkc4Jhp

Score
10/10

Malware Config

Signatures

  • Detects Healer an antivirus disabler dropper 1 IoCs
  • Healer family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • q0603873.exe
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections