General

  • Target

    f449e6978314a4591c2812f0db65927a5664ab82c8af4ed92164665d61e32143.exe

  • Size

    4.0MB

  • MD5

    959392c119d350e9d108eb0c365a2605

  • SHA1

    733aea2004bd70f53fd1882d45a8f1f82384dcb4

  • SHA256

    f449e6978314a4591c2812f0db65927a5664ab82c8af4ed92164665d61e32143

  • SHA512

    dabdd3b5b8c1f420002ddabe46f6ce41d07f14c465287c1d7835310c908d0068c74131a44c83a92c5708b33c2effa4c8a93f791c19afa4f8d9e13a8f8821728c

  • SSDEEP

    98304:C+5epUz8zcGUxCxQ+OC9vUsuk93zAS5sP7Ylt:1epUzUcGUxCuDgb93sQ

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Detects executables packed with unregistered version of .NET Reactor 1 IoCs
  • Zgrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f449e6978314a4591c2812f0db65927a5664ab82c8af4ed92164665d61e32143.exe
    .exe windows:5 windows x86 arch:x86

    12e12319f1029ec4f8fcbed7e82df162


    Headers

    Imports

    Sections