General
-
Target
a1f8bb5990775f277540eb4c7579695477445afd90262cb819567cc9b3042166.exe
-
Size
314KB
-
MD5
ad997dc4ee32ab469e45009f218175d0
-
SHA1
17ef145486c494ea9c727972c501471e720887f0
-
SHA256
a1f8bb5990775f277540eb4c7579695477445afd90262cb819567cc9b3042166
-
SHA512
727aceb3edd5dfbbbad84e1aef4beb3773313378bd4fa6cd77800d6cf578ba740a5ebc1f3740593071a26daa2cf91e49243fa4ba043d934c8bd936a1526c18d0
-
SSDEEP
3072:oiPK9mkbyBaKJyPATmiyAnY5o9BrFV0bIBVvBCj4EKK4h75AQ5ii:oCj2yBOiW5o972jEh75F5ii
Score
10/10
Malware Config
Signatures
-
Detect ZGRat V1 1 IoCs
-
Detects executables packed with unregistered version of .NET Reactor 1 IoCs
-
Zgrat family
-
.NET Reactor proctector 1 IoCs
Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
a1f8bb5990775f277540eb4c7579695477445afd90262cb819567cc9b3042166.exe
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
Imports
Sections