General

  • Target

    Nidavellir_loader_protected.exe

  • Size

    6.4MB

  • MD5

    f2e78f648bb624156bc1d16d3d79bb51

  • SHA1

    dfad1491800e5fda518ab03a6043051a14ed603a

  • SHA256

    40a3ae495caaff91026e36d2304f90fdd214fd1108318962b37b6499d1c4e63f

  • SHA512

    6645de0ec0034c317c30968647e53356c015acba954588d153e215847c7077828b97c49f6a0a0007a9baa659434814c595167fb37eb0a2b8ba7d9524eef54c2c

  • SSDEEP

    196608:4cUvT6qHFpkjkjN4C2lMld2KIgutEoQGco:6b6qlxCZlWdbIAJGco

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nidavellir_loader_protected.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections