Overview

overview

10

Static

static

7

9a5d0de937...72.exe

windows7-x64

10

9a5d0de937...72.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    801371fcee1dbbc9a320f61cc0e7735c.bin

  • Size

    30KB

  • MD5

    b501ddda50dfda33208fb4cce4f83cd0

  • SHA1

    75033331b527d015b98d36a4bb9b57502976f4b2

  • SHA256

    6b18a825b27244eb29430637d97752e65a45cbdafeb4298f54bbbe3a096473a5

  • SHA512

    e50e56d66c4162fdf6526fde82c9c688bad955c121dd04807608940b400492b470fe5ff0158e69f157528c53565da9bbab4344a85c4e4975437bfef3c22cf5be

  • SSDEEP

    768:kLTAGYL8ISuoIccxlXaXX+fpGLLPqqrDvstrk1/:kLTAGK8I3oOTaXX+fQ9Kg1/

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 801371fcee1dbbc9a320f61cc0e7735c.bin
    .zip

    Password: infected

  • 9a5d0de937e92800af460c2ddf4ae6b04a7828ac60331c8a01ff82b780048872.exe
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections