General

  • Target

    1a8aeeff96a48bc22902b90a8a5670f6cd7be22fd95477b08ef60b548fe394e1

  • Size

    6.0MB

  • MD5

    3c0fb1a256bb8f1142e6343fbee61eac

  • SHA1

    bb6e1f4374c194971d6be79f49e9aa3aeb969b13

  • SHA256

    1a8aeeff96a48bc22902b90a8a5670f6cd7be22fd95477b08ef60b548fe394e1

  • SHA512

    1aa4e5f499a8b3fb7110bca287b6b172befbed6e1808259fd9b9b924a45cf2f892996f315976a9ec315e0971de31e2105ebcd541a8100675a05ae5130bc55bea

  • SSDEEP

    98304:6H0x4kSHOOeq1WoyoKhiPSjY6NgHIva2chnmWRaEik/2bzwdQwMS95uDaRypkXbA:0MjtkaOaYag4aoPkuSQwB5uD1ebYELK3

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 1a8aeeff96a48bc22902b90a8a5670f6cd7be22fd95477b08ef60b548fe394e1
    .zip
  • Noise + New.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections

  • 注入器.exe
    .exe windows:5 windows x64 arch:x64


    Headers

    Sections