Overview

overview

9

Static

static

7

QIw3x0N2J.exe

windows7-x64

9

QIw3x0N2J.exe

windows10-2004-x64

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ace262e6aaa20844de6417446d75b50fea5cb55abf7bf251aa346ab6d8032785.zip.zip

  • Size

    27.6MB

  • MD5

    cc8fb08b80075d842fd45a55b7fdb250

  • SHA1

    a5b9c076dac6a11b3972fdcf8bcddfa8da235542

  • SHA256

    5995f50f6d04c1828c016537b748cd59e1cc4a9c9bbab33a6464b96d3eb6097e

  • SHA512

    1a6cc8384e034d967abd4d61a075d2a812a6a8f57be4fc1aeae082307b2cadbf69702a342af2af59aacda052424b961823f2e50655aa311990e47778f8c4aaf1

  • SSDEEP

    393216:gMTZQNtUtPDhFnrmwsbiHulW/GuZbaCoJy/JUctb/ma0E+/D/9yJVE:jQNtUtl4wsGHulWJgbjQfa7h

Score
7/10
themida

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ace262e6aaa20844de6417446d75b50fea5cb55abf7bf251aa346ab6d8032785.zip.zip
    .zip

    Password: infected

  • ace262e6aaa20844de6417446d75b50fea5cb55abf7bf251aa346ab6d8032785.zip
    .zip
  • QIw3x0N2J.exe
    .exe windows:6 windows x64


    Headers

    Sections

  • Z6AFN/BR.ini
  • Z6AFN/CN.ini
  • Z6AFN/EL.ini
  • Z6AFN/ES.ini
  • Z6AFN/FN.ini
  • Z6AFN/Font/VN.dds
  • Z6AFN/Font/br.ttf
  • Z6AFN/Font/en.ttf
  • Z6AFN/Font/kr.otf
  • Z6AFN/Font/sc.otf
  • Z6AFN/Font/tr.ttf
  • Z6AFN/GR.ini
  • Z6AFN/KR.ini
  • Z6AFN/PL.ini
  • Z6AFN/RU.ini
  • Z6AFN/TUR.ini
  • Z6AFN/TW.ini
  • Z6AFN/VN.ini
  • Z6AFN/dd.ini