General

  • Target

    winp.exe

  • Size

    13.7MB

  • MD5

    b9eee2d8e580d3f44b5d9a328a25f063

  • SHA1

    c87c9eeb829c2bfc5afd0ed88e740a1f3938aa12

  • SHA256

    7e02b525f139fbda94aa47772035f70e7a69d3799ee8e918d1a4ad497630d369

  • SHA512

    8afa6f8cdfd3ba8ea157262ed79c4dcb0cef40a502d956128232945cedac089fcf35ed70f5f5ad3075f4aa76a136a1f21da9a3d80eb0111910ab8f36144cbdf0

  • SSDEEP

    393216:QDxnMshdzBV5saUuNIDVhhReXq9ESYaxOppFlkHsKB:QDh/D5CLeaEtaxOp+Hs

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • winp.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections