General

  • Target

    WindowsFormsApp1_protected.exe

  • Size

    2.9MB

  • MD5

    14518a3289c4d9c82195e71398b7c580

  • SHA1

    4f37722229bbea2a8a6592ea9077617e152d9ada

  • SHA256

    4b15baa6bdc91e2b2cd6ca50482f3fce04cf35802367c52cbf9cf3d1e340a9ac

  • SHA512

    6d94d7cce5d4360a009382d98645684b677b6f8e181800467c23dd92b675cd43079de714881d799437b7587f28a663e22f89e3f04356dc8893081d5dddba52be

  • SSDEEP

    49152:OdjGy5JBqt+tmglKNMKkAVPSwocsPoj21Ga2eWv4C4EtGgm9lx2X5VBtK71yHqM4:eG2CskglKNjVibojfVeI4NEpm9fwVBtY

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • WindowsFormsApp1_protected.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections