General

  • Target

    hanzopermspoofer.exe

  • Size

    31.0MB

  • MD5

    3efc3953bf361a6921855261d7db3ebc

  • SHA1

    5800977eef27d3334b317857d888aa390095f4c4

  • SHA256

    283a8086913fe4355ff9b17d5a0037563f078b09eb4b3b50952a9192a2e974ff

  • SHA512

    9152865d4b7bf257675a314b3a6ca9101ba2f3d9b61140b0cb9fa5364a3f436e4e4365f8232bbc86189981d6f540bab3e1501cb0092b3879e58b85e7bccc00b9

  • SSDEEP

    786432:4VytLBdFNfkdFpNCWwlInHkhK+2bjEZNokgBEPVj:OytnXkdFpbPktAo4BM5

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • hanzopermspoofer.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections