General
-
Target
b9a95ff468b8f3074bc73a70a4023512.exe
-
Size
4.3MB
-
MD5
b9a95ff468b8f3074bc73a70a4023512
-
SHA1
954fd71c9a72516b574eb7be4bfd36fbee815c9e
-
SHA256
72e6aecc1e7172bb885e9454ae448965526b1cecfa6324a03e6c890b464f3533
-
SHA512
aec411a624301027d66e072efd1327ab5ab5acf495df73e696ca69909773ba57a19e584aff0e83e0992ecf5f25c565b32ea03791a524d5ec97c787215db8b982
-
SSDEEP
98304:RmLp3BhaFJ4pGKnqHtUtJp5bLLLNtZlPyU4V:RmLp3LCepyUxhLvZ49
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
Zgrat family
-
.NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
b9a95ff468b8f3074bc73a70a4023512.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections