General

  • Target

    han.zo.exe

  • Size

    5.3MB

  • MD5

    aca3fea6cc9dc5976ad3136ebcfc44ea

  • SHA1

    575eb7a336a17b36be250000e75ae2913da6d5fa

  • SHA256

    8b146c775c240e02e3ce27f57fc952d6e1665e736603863b2599891894dd40f6

  • SHA512

    d23e8df5b1b70255ca57cc9ba65e0d9b0eaf6792ec30c582c81e54e70fe871ed7badb450d18e9fe1e474168eab642a7f9589922d64763ff2da56a2492b5b3d7a

  • SSDEEP

    98304:3jQvbYoGRoZhbWan0jaGIyyetHuRVrJf1xjjlWCzMXB6BVUEzdX50VHLI3Zra2XK:3jaGRkoanZeO3ThlmgV7dXG2U2sLN6y

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • han.zo.exe
    .exe windows:6 windows x64


    Headers

    Sections