General

  • Target

    temp_howl.exe

  • Size

    10.4MB

  • MD5

    f2a8be093dd7d30c01fd57ce5b55c879

  • SHA1

    0ed3affca3ba1ee7c08f6a65f9ea751bd49198dc

  • SHA256

    42dce0a6272b59c3277ef475ebc845d99020190ba2300409d9ec19ae4b3dcdd1

  • SHA512

    05ff3774542713f827aef7a3d2fe92acb69ec1e8014ca2e9a70e18697f06528e81d9130bab58e941079d9d965d2edbb58bb6726419281c3e16f24dc3ef965aac

  • SSDEEP

    196608:B6ATZyD11Kw53YUYfJ926PvJNqt71jNGiwLueDCed1wnDU:B6WyDf53YUs2Mvjqp1x73AC4yY

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • temp_howl.exe
    .exe windows:6 windows x64


    Headers

    Sections