General

  • Target

    0ee115c68dc548be9c81149cb3722b5d

  • Size

    1.8MB

  • MD5

    0ee115c68dc548be9c81149cb3722b5d

  • SHA1

    46c76708dfa19ae7512a57e4e5fea68a59454b33

  • SHA256

    0dcc23ddee4fb0a7706aa00c4dccbc18f990fb40260c23a530e1f831a4d159f7

  • SHA512

    aa71ffc08fa762f5bdc8bc70c8bd01b5a53440338dff9dac672d56485e7a5af671e023d771684a79d055feabe3d94258a1cc050b160955e538d78c852fdf499d

  • SSDEEP

    49152:4R/IOuaZAxSxXRHaqXEYLEGnVBlEQfbnYNIGTedzNUW2Yd4D:4RAOuaZAxcXR7XEY+RqGKpmW1y

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ee115c68dc548be9c81149cb3722b5d
    .rar
  • NewLLK.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections

  • ReadMe.txt
  • 新云软件.url
    .url