General

  • Target

    PWHM_v1.1.zip

  • Size

    28.2MB

  • MD5

    d25e1bbbe52d246059374e5bc6ab31cf

  • SHA1

    862c64b78c9e38c040d23ad33158a5da61cb417b

  • SHA256

    91292107669ffd59d6be639d0e4d00bb63406e5f0d711bdf9b708651d517c14f

  • SHA512

    aac245a90bb95dee44d06705aa1d326679ae16fc3a1186ab6729626c71aa00e900e5887fc2cb1bb882694d0b9055bd725d87284818a5af7db50b5621fee79741

  • SSDEEP

    786432:CTPiglcw0OOP4fX5HwagVj3bGqbQRfXu1qqq4:CHlcjgfJH4VfGqb2f6qqB

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • PWHM_v1.1.zip
    .zip
  • PWHM_v1.1/DreamyCaramel.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Sections

  • PWHM_v1.1/PWHM.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • PWHM_v1.1/Resources/Images/palworld.png
    .png
  • PWHM_v1.1/Resources/Videos/Background-2.mp4
  • PWHM_v1.1/Resources/Videos/Background-3.mp4
  • PWHM_v1.1/Resources/Videos/Background.mp4