General

  • Target

    4b63fa2fe84cdda5475746eda59015be

  • Size

    2.1MB

  • MD5

    4b63fa2fe84cdda5475746eda59015be

  • SHA1

    fb560c3fa9e96b0d562161ea52c4553b4e089703

  • SHA256

    49a0967f3b539113703fccb607f16c398290450c99c341e725525ef4d81edb2e

  • SHA512

    ede2beee06a89f7075c248539502b7c3bb556de3c764aea79117fb856c1cf7c557cb463083b67c4ad6248e5f37f1a396096f079f2d99b7b6424b5cf36404d2bb

  • SSDEEP

    49152:4RoUj0Dn/cl3H9po2CR4QKIatvwuzHVFXlxnfuoIX2E/UG1U:Bz/C3HDo2TI0IuLHnfuoIX2YhU

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b63fa2fe84cdda5475746eda59015be
    .rar
  • YSFPJK.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections