General

  • Target

    coreServiceShell.exe

  • Size

    8.4MB

  • MD5

    a2bd21f3c10eeb26a1bcc498a9b6172e

  • SHA1

    a85b92dace17045a6cbd483ff89a043aa3fc1a36

  • SHA256

    bd064a8625a7a3f07198066fd664b1461e2dfa062b32718881a757f764d372d7

  • SHA512

    05b69468e397339e877e1b8fd703fe8f02beeb4d8a5ac3d096aa97324cd45b9fd34fb687c018e55837281590dfc7fb07f1bc9e13ede05bf869ccbf3d2ae600d5

  • SSDEEP

    196608:hHyvZZ/sYgYnzocZYq8lDEysK62xRST5DuqORH:hHyvD0Y5nTYqbyURCp

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • coreServiceShell.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections