Overview

overview

9

Static

static

7

Y1scCl7y5x.exe

windows7-x64

9

Y1scCl7y5x.exe

windows10-2004-x64

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    417218977d9b59a41529569f18fcb4cbed57d3ec3b194e1b269f3409e8ae08e7.zip.zip

  • Size

    26.8MB

  • MD5

    c118ca6058045cd1b455843c8f533f58

  • SHA1

    68b78f505d572d8f8315731af6a9250549067c16

  • SHA256

    36f3d1441772899e42d2b341b8afb7de03129daa3354bee559827855d8baccb2

  • SHA512

    b0fa71da75ab650d65383c3f08030f30b255b3166a2ece60319fa1a41542b294cfda53202d9a4f2500021ebecbb3a8e80f6aa66f8260b5f8eb8c983cc0dc4eb7

  • SSDEEP

    786432:Xyx994fHjjWGtrt0EQ96vCnikHsnZJ9sJN:CT94Pbtrtugv6fHsdG

Score
7/10
themida

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 417218977d9b59a41529569f18fcb4cbed57d3ec3b194e1b269f3409e8ae08e7.zip.zip
    .zip

    Password: infected

  • 417218977d9b59a41529569f18fcb4cbed57d3ec3b194e1b269f3409e8ae08e7.zip
    .zip
  • Y1scCl7y5x.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • ZET4KR2B/BR.ini
  • ZET4KR2B/CN.ini
  • ZET4KR2B/EL.ini
  • ZET4KR2B/ES.ini
  • ZET4KR2B/FN.ini
  • ZET4KR2B/Font/VN.dds
  • ZET4KR2B/Font/br.ttf
  • ZET4KR2B/Font/en.ttf
  • ZET4KR2B/Font/kr.otf
  • ZET4KR2B/Font/sc.otf
  • ZET4KR2B/Font/tr.ttf
  • ZET4KR2B/GR.ini
  • ZET4KR2B/KR.ini
  • ZET4KR2B/PL.ini
  • ZET4KR2B/RU.ini
  • ZET4KR2B/TUR.ini
  • ZET4KR2B/TW.ini
  • ZET4KR2B/VN.ini