General

  • Target

    ed.exe

  • Size

    6.4MB

  • MD5

    aa83a4b6e0693eed4def7c60c1082bbd

  • SHA1

    eab84e3ba1e808c6771cbb562ee1a9367bd96f57

  • SHA256

    181c23f8a825470647b32a677bc1e19128916b9ac3ac81badc0731a5cd8d2989

  • SHA512

    b827b24daa5a3d754ab23445aacd2fc6207ab2aef992f2ba01e51fa57a8d4aedf4a477447bf93051f76a834a22645d38a9acb82e791b132ef139a45e370468d5

  • SSDEEP

    49152:47bHAcezY38qXb7KKMwnYFu6WiPa8H/T1Blb0mTQulrjSAKITcno98qHQs1h3wdE:4ItEX3K3ik/T1BKmTQuUAn7HzX3wdE

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ed.exe
    .exe windows:6 windows x64


    Headers

    Sections