General
-
Target
skibdiuwusenpaiwizdownload.exe
-
Size
220KB
-
MD5
c8e25ef8d755a78987254e14bad5c41b
-
SHA1
4bc31171d7155382a05631051c6da1e0cf436407
-
SHA256
8038725058fe8b8dc0686c72223ab5e36b5456293dd00c8fe2c9961ecad43682
-
SHA512
c1293bdf5cc1a497333b5791a20b1fdb4a34c0ea3b06f609d416c6d4dbe1c293bae8ed357ee5571cb493b143c19214d21f45711d9f3ccc396eee070768c5f461
-
SSDEEP
3072:cPGb7A0cwvp6StlAucH1eHSKhbpHQKGO0V37UYZyiMXaStsjNrL38UfnhB1jw1kM:cOQwpcrK8Kf0t7UYgi2ztOrL3vhL2J6
Score
10/10
Malware Config
Signatures
-
Detect Xworm Payload 1 IoCs
-
Xworm family
-
.NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
skibdiuwusenpaiwizdownload.exe
Password: asf
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections