General

  • Target

    NjPOD_Remastered.exe

  • Size

    15.5MB

  • MD5

    dc9a200b471eb2348bb2b7d179f1ccb8

  • SHA1

    f1f6a71c74c4d31881fed3a32905e411487837e2

  • SHA256

    8b3e92b9f0a2125be44523b9918b68b6c95c96accd5a1c6ae7458209a69d9146

  • SHA512

    6a23782cb8b2d4d326a9728f4d1de9c72169259edf4c3185dc0a0116c02d0a61092327ff725ba0c1b11891648f086152efa4d5e280793696d20e9d1bbb54f17b

  • SSDEEP

    393216:6Untikz6hDeDMe4rW0kvMYNDv2oi+DBRiy/GBkgbPk7W2TFPNcLyIy1HgX:6Untikz6hDeDMvrkNyHyikghyFPeN

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Obfuscated with Agile.Net obfuscator 1 IoCs

    Detects use of the Agile.Net commercial obfuscator, which is capable of entity renaming and control flow obfuscation.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • NjPOD_Remastered.exe
    .exe windows:4 windows x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections