General

  • Target

    3X0 0DAY.bin.zip

  • Size

    434KB

  • MD5

    a97ea1608cda627c3efdd8baf1cbaa56

  • SHA1

    d60b5c8cdc8604ee6bdeaea820b66fe0f6a7b938

  • SHA256

    19a43555e70d8b085c71f433d667db090babe8936feaf3b2102299bc2d8a0467

  • SHA512

    07491fc3580c865336368485afd65550b7ddddd22b8e6edc4a5fbdc288220b36698de764e64f029c390724ce576682b026eb5d2f69ad5c8afce115edaa26e099

  • SSDEEP

    12288:3kUIobYATbO1YGSwO6/VUdEBTj8l0C3iy:VJbRnG4EBH8ymiy

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3X0 0DAY.bin.zip
    .zip

    Password: infected

  • 3X0 0DAY.bin
    .exe windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections