General

  • Target

    616066741b94092323088fe5678b78f1

  • Size

    239KB

  • MD5

    616066741b94092323088fe5678b78f1

  • SHA1

    675515fca47ab53d191f9c51b669f8ad3cbd699c

  • SHA256

    86bcd12566748918ddf5fe4ce28aed363676e5cccc38cc80ca98abd2d0aa2a8f

  • SHA512

    c7220cba54a831ad97fb241e1530812f8aed20feb573baa12d7e389e5f7649622adb1b42ced9a7e224a7a1238bcf27f7444ac86b69ec0b655c01c88da9773932

  • SSDEEP

    6144:pSApbtbSW7uz3OLyOhWGgoJUt7Gy+Rlmk/0THjj/UTYu:pdvbSWi+LXh7guNy+RQkMTfdu

Score
9/10

Malware Config

Signatures

  • Beds Protector Packer 1 IoCs

    Detects Beds Protector packer used to load .NET malware.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 616066741b94092323088fe5678b78f1
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections