General
-
Target
skibid toilet woofer.exe
-
Size
278KB
-
MD5
c94c8da6a3045ba2294d878f1ce8a53f
-
SHA1
aa0936d90c4dc2f6dc3967eaa3b245d1ac3714b0
-
SHA256
9d3df27f85cfc92b02ebc10be65c0aeefeac77258180b01af209fbb53cc3088f
-
SHA512
09b5bdf3b46abbaa3dd0339e640f7e9dc3167dabe0a3b25dc3a2a21ccc4b51ce4d4e74c191558d9dcf057ae16b9ccbac4ec3b5668a2360a10d41259c9df15572
-
SSDEEP
6144:/wpMb+Dw4YFk0Gz96GuA6/fslLPlwQ9+tp+LmYwGOvmMxuQ3veRFUk7gE+cFZfeF:/wpMb+Dw4YFk0Gz96GuA6/fslLPlwQ9M
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
Zgrat family
-
.NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
skibid toilet woofer.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections