General

  • Target

    $RK5WQMP.exe

  • Size

    20.1MB

  • MD5

    323cf62ea2aa53db5f49f4cd5fd5cbcc

  • SHA1

    7e2e4e8474819661b2716c48e88233095a1fa4ab

  • SHA256

    e9b181edfe5c8f68e4d9e12ba57e4c935d270ac336f79fbc63f8f596a01016b2

  • SHA512

    24b929e7f56aef3316316b4c17216591c82ece95d9a19b97b19dc25baa6c2ee5ce9fe94926320b28bd03cbc191e6fa34c41dd5ef663e0a17961982b818c19142

  • SSDEEP

    393216:GseSVL2etA55mT67LKKtM4tubnNHgTWgNy5MNokqE3Dlq5L0Fn+2SecNwv:fdib+6PKituFmWiDNoZEz0tYn+3ecN

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • $RK5WQMP.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • mangokeywordsgui.pyc