Overview

overview

9

Static

static

7

J8jD_a1YsF.exe

windows7-x64

9

J8jD_a1YsF.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    52e7d2dfc5205fa47a41f9a6a272f5b3a2d696d505c9839bcb50ce6c8d782747.zip.zip

  • Size

    27.3MB

  • MD5

    607bef3b2a7f49abaa876233056a204b

  • SHA1

    9efe76db4defbc88e219f3ae9eec589bc113e9eb

  • SHA256

    d333147b7c18362753524176d35f7f12fe480b37c685b79fecaee09808560d08

  • SHA512

    ec22d7d199fd53699829edcf79433d4b096844fe7fbf039cb8dc16b901e6d92dc1ade4a3c4c27dd5a56bbf3e8e384dbc75ade9cc174ebdb60c3dd2a3dea06602

  • SSDEEP

    786432:77nHshVhb3Ki6XUCABKRl1gh4cVR47U+gWzPMD:7jMhLzWUCAZ47U+fMD

Score
7/10
themida

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 52e7d2dfc5205fa47a41f9a6a272f5b3a2d696d505c9839bcb50ce6c8d782747.zip.zip
    .zip

    Password: infected

  • 52e7d2dfc5205fa47a41f9a6a272f5b3a2d696d505c9839bcb50ce6c8d782747.zip
    .zip
  • J8jD_a1YsF.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • M7PXU/BR.ini
  • M7PXU/CN.ini
  • M7PXU/EL.ini
  • M7PXU/ES.ini
  • M7PXU/FN.ini
  • M7PXU/Font/VN.dds
  • M7PXU/Font/br.ttf
  • M7PXU/Font/en.ttf
  • M7PXU/Font/kr.otf
  • M7PXU/Font/sc.otf
  • M7PXU/Font/tr.ttf
  • M7PXU/GR.ini
  • M7PXU/KR.ini
  • M7PXU/PL.ini
  • M7PXU/RU.ini
  • M7PXU/TUR.ini
  • M7PXU/TW.ini
  • M7PXU/VN.ini
  • M7PXU/dd.ini