General

  • Target

    Entropy a.rar

  • Size

    30.1MB

  • MD5

    61e65448800b950ad6227685dc6a3223

  • SHA1

    6b686a844a48a6d2c0dbc352e27c2c37629e8d7a

  • SHA256

    ee16484470f2d15706c327e9c229fb6647851960220505fdfebdd835a77b33af

  • SHA512

    36b169af5a26ab5c47f6d804703b2812f5cc91b360d7a1a57314118593b9f155ff5c5d2010623ae328a018e4227bf049fc0d8069fae1c11ff47db2921336974e

  • SSDEEP

    786432:8afp2yG+CPmT1keTEbHPd9ylXhexwPm+ukLnO6tHRPQ6haGj7r:fcmKUEB+ReN+uWnPdQ6hd

Score
7/10

Malware Config

Signatures

  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • Entropy a.rar
    .rar
  • entropy (old)/Kangaroo Patcher.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • entropy (old)/Kangaroo.dll
    .dll windows:6 windows x64 arch:x64

    0ed98e71adbb3a2a783bfed0bb0fc2e8


    Headers

    Imports

    Sections

  • entropy (old)/entropy.exe
    .exe windows:6 windows x64 arch:x64

    fd0a9a9adcdf86a9c10b85410ddcf253


    Headers

    Imports

    Exports

    Sections

  • entropy/Entropy Patcher.exe
    .exe windows:6 windows x64 arch:x64

    f7a4012d250c70305954f058295fdfd5


    Headers

    Imports

    Sections

  • entropy/Entropy.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections

  • entropy/EntropyV3.exe
    .exe windows:6 windows x64 arch:x64

    fd6430271f2f16986c253db21eeced18


    Headers

    Imports

    Exports

    Sections

  • entropy/READ ME.txt