General

  • Target

    845b1e2520ffc539bbccba06147d3322a959d4dd733ba43158a22075333252cb

  • Size

    959KB

  • MD5

    1754b7084c828813d85f60d477a0f12a

  • SHA1

    5372fea028624e65d7e613e03dea643a7ec3b7f2

  • SHA256

    845b1e2520ffc539bbccba06147d3322a959d4dd733ba43158a22075333252cb

  • SHA512

    ce22df357f54150e98efc143dc496fc8caf92be4e197f491bc5fb6cb2e7f2de4bde67476f0da41f614f963769cd8213d01c140783d2e2b2384560abadc5203a9

  • SSDEEP

    12288:3MSApJVYG5lDLyjsb0eOzkv4R7QnvUUilQ35+6G75V94HgMQbvfH/HReRb5HRwRr:3nsJ39LyjbJkQFMhmC+6GD9EkSE6At

Score
9/10

Malware Config

Signatures

  • Beds Protector Packer 1 IoCs

    Detects Beds Protector packer used to load .NET malware.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 845b1e2520ffc539bbccba06147d3322a959d4dd733ba43158a22075333252cb
    .exe windows:4 windows x86


    Headers

    Sections