General

  • Target

    ngrclub-protected.exe

  • Size

    3.0MB

  • MD5

    209ce82914f67632c011132bc09a1584

  • SHA1

    eb565f108a63b3f78ea3cefbaec1d845663c671f

  • SHA256

    d3a452c7dd9039acac94b60bec2c90d3bb656756ae7e18a50b328d6fe22e80cf

  • SHA512

    fa47be79234d6805ce37a37cfe1bbf2792dba42ed60914d7b8fc9905bd59b0e483bbadf0a8abcffab07885eb6ea5dfa4d2271fb24fc8099d268b0549f701be87

  • SSDEEP

    49152:LdWnZHdTB1mIkDa1lS5x4hxQJxG9d213ChYfKMjObIOZc/HyVSUwTPGlOVZNB2zg:LdWZHZB1UenSooxGf2CGfKYOvm/SVcjX

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ngrclub-protected.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections