General

  • Target

    Zento_protected.exe

  • Size

    4.0MB

  • MD5

    6e33966ba6c46db758ce1597000366fb

  • SHA1

    6238218fad1ad1eb42383d0f36325b25f92c1a35

  • SHA256

    043eabf84a181aa605fdb7f16f9cb6ed6823f86b88c7b1c25a438ed3389abcea

  • SHA512

    489c5f850212197ae0fa4c5eaa0a05a5f8a3682a7019d4dbe580c3bfd5bf060b5fd9ec9403a3dc0a416b7adb65c33328141c05935c5f34644161ea321090f2a0

  • SSDEEP

    98304:iEg3lVGjDCKrMe0rlu9Zb5qybWubcpfrBa7MId3aawc3:QLGjDCKrB0wZtq+ABrBa7MIUU

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Zento_protected.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections