General

  • Target

    fileexe.exe

  • Size

    4.6MB

  • MD5

    f03e4352af8fe073527dd5277f406743

  • SHA1

    3a3654a57fc4cb7c942829165bc52b805c278278

  • SHA256

    8c9b7c1bc65ed061ff8af8b3f210e98d97139c7b5d1b9ff107c072b726bab823

  • SHA512

    3e617165802be8d100d3a53d051cb357ef3b767b3f3d260afc1a7da7f2996a63865c545f8db854dd46268a0e8484b3e550a06f68a8ecf06ebcd57c42f01ee396

  • SSDEEP

    98304:wID4sQLWqRi8tmrI3gNGHjcX5uN13mEzquag:wkH+WqRi88sEGHAX5uaEzP

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fileexe.exe
    .exe windows:5 windows x86 arch:x86

    ec80820dcdf2b0e0211f84cab39e704c


    Headers

    Imports

    Sections