General

  • Target

    4504-466-0x00007FF67BFF0000-0x00007FF67D187000-memory.dmp

  • Size

    17.6MB

  • MD5

    0336c20470b6564ddb3abc887feb1900

  • SHA1

    6ddb6d319126fd6b8d52fcbd67508faa2b7d4c6a

  • SHA256

    f49e4e35f96ee00391d72e720cf11ba1d34a1fe4487ee56206b5d72cce0fe3d8

  • SHA512

    9cb0d121d6ea10d6fda31490756f74fdf556c68a53353cc3f8f36b2f147e0116fc196233634b57f2e74312c1784387a53a68e578dc4f931ac9f85975705764b9

  • SSDEEP

    196608:SOaZHoOzaLHVVaTVyGQSo+GHx/gmGcPqbPOSsM8VYpWlsUqgreYvSfG9W6:Hz1VaTVyfSWR/RSshScPrress

Score
10/10

Malware Config

Signatures

  • Privateloader family
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4504-466-0x00007FF67BFF0000-0x00007FF67D187000-memory.dmp
    .exe windows:6 windows x64


    Headers

    Sections