General

  • Target

    Lib.exe

  • Size

    111KB

  • MD5

    b17ab7a4bc50b2a7fe80f565212e4d0a

  • SHA1

    2288b166f300d2a5a46b23a6582a590194111915

  • SHA256

    97850154d822735d91ded7b0a57330ea8bf5e42c37ca2f56775b63017fee1ba9

  • SHA512

    6dc97448e17b64e4eb6d0b2e46d012cd1fbed45b54f7ea2cb24d5b01da7a41f9987fbc0d9903b7fd39e4c02a681d3792c0bfc5c39ae2c6fd75dc8fbf95c0b54e

  • SSDEEP

    3072:lPQtRrX4hsFDIZsXzN+nEDloXbF2wqR9SUjByXefO5naLIjvxgLqi9Kr3xgDqSWX:lotNX4KDIH7D

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Lib.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections