General

  • Target

    CandyMenuFREE.dll

  • Size

    1.9MB

  • MD5

    222e35aff10dabb5937e97ebd77b8c0f

  • SHA1

    f683f7d603b7888553c5b4f70caa0635acc702c6

  • SHA256

    b3933b129c52ac791c555ea18928287658bc7147d77e4b4b7b3519afa6c2f969

  • SHA512

    e3f0c637c90e894c4b5cef9d8d317ae3e6ffd295777b5b7fe1c7489bcc2837ceba39463a65501ac7031be97abd1216e555577b03e3df8ffd30a5b8ec50bd78b3

  • SSDEEP

    49152:TquSaLoOVgxxWrcHyKEjUjPBFzEZEzmT+qFsv6i+GrzOHfIVLiBDgNn803Ao1a8C:ovWKDoNcna/Aab

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • CandyMenuFREE.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections