3LOSH Exploit[.]bin[.]zip

General

Target

3LOSH Exploit.bin.zip
Size

429KB
MD5

a74ba20c548459ffc5627bffd7a91224
SHA1

393577dc1cb26d6e9e53eae8e10eddbdc4eeb1b4
SHA256

92dad0487438945ef4410b08b23cdffb677a5b47c8375176cc61c9d66c50e89c
SHA512

c44412c6efeea818656cfcf1d7320052456a03db63931eae2c2b6e5c907a87f7afd58299796452aa852e1c5daec9131d6893acde4a034ba47624975e48caf1ef
SSDEEP

12288:Rwk0aZ6Pp0zrgSZf9nPzgYS6O0/xHSREB5eKHZFX:90Cm+zN/C6zF5fZd

Score

7^/10

.NET Reactor proctector 1 IoCs

Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

resource	yara_rule
static1/unpack001/3LOSH Exploit.bin	net_reactor

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/3LOSH Exploit.bin