General

  • Target

    Nidavellir_loader.exe

  • Size

    6.5MB

  • MD5

    411015214c27673caecde5ac2322cbb8

  • SHA1

    18b400c12252985bd9c4d9a554a70133279d04c8

  • SHA256

    c1fcc3ccc57c73729760ba1130a15d5d8b74681b91e41e0345641b829610c613

  • SHA512

    866b0821460f7ab019a3a0f58d76a2203ffc5fabe78271d83a375eea5eca6b83d3e20b4b18eda0dc3b9c6b4486cc1930debb8659377dec6b45cfa596ffe7eca7

  • SSDEEP

    98304:RLHvDBd+lQIUDLxAd3vs3G9zkDZaoW8oBrje3BPl75vYe4cLW3lnKbIl+Vydz:RLHvFd+yDDitsWuDZg8MrmhvYqYngxgJ

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Nidavellir_loader.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections