General

  • Target

    eb2cb43109e3828c2bd8031e2581234c9bb99ac01a4d0e525c15b8ddab4dfc4e

  • Size

    167KB

  • MD5

    ee398a5a810d55e77da341e985df76ae

  • SHA1

    a36f40113cde26dc67c6ac6dfdff521edaaab141

  • SHA256

    eb2cb43109e3828c2bd8031e2581234c9bb99ac01a4d0e525c15b8ddab4dfc4e

  • SHA512

    0795159c0f27e1c429b38dabff72168c1235b3d6653b028828b9a20e3893a58de7d6fc97dd779c7f92c75105570be9b8bd782de07e550f2f81161a7b8f9dc5bc

  • SSDEEP

    3072:4xw8QEMF1CXiLHr+wIr6Nrjs6vaqTy7DoouTW0Hhr/HQZ:fE21CXiH+w4gzW0dw

Score
10/10

Malware Config

Signatures

  • Detects executables packed with unregistered version of .NET Reactor 1 IoCs
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • eb2cb43109e3828c2bd8031e2581234c9bb99ac01a4d0e525c15b8ddab4dfc4e
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections