General

  • Target

    c07e66e4cc164f062240866fde230002

  • Size

    3.6MB

  • MD5

    c07e66e4cc164f062240866fde230002

  • SHA1

    fbe38f60370b84a15d1394f990cc158e31bb1add

  • SHA256

    57221ac04e04d59c42bdc9ab1a4473332fa677d6e78d61f4d960873e1be7e41d

  • SHA512

    c991a906e6df62daba5aeb7ef09e5a0fe6480ccccdcd52f94dc9d1d7f4cae3c30869e0e9ef0bf7c5147bb236c6c65d63f199e7d8d82e2299a320ff0e476d6991

  • SSDEEP

    98304:Er9JEsY0XN9Eflgzc2A8YyN2oQuf1O6QZO77hUJTlhXsAKV:sIPKN9EtgziyMUA6QCUJE

Score
10/10

Malware Config

Signatures

  • Detect ZGRat V1 1 IoCs
  • Zgrat family
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c07e66e4cc164f062240866fde230002
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections