Overview

overview

10

Static

static

7

b33c768a9b...43.exe

windows7-x64

10

b33c768a9b...43.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb6a7532e6cba2c64fbdeaef9807bea891c52859f26e23ce339024f5e103b278

  • Size

    30KB

  • MD5

    dd5ab174670ff8062f83f363efcd691a

  • SHA1

    e5a5adb4c865e3e231bd880435f6e425244b1271

  • SHA256

    fb6a7532e6cba2c64fbdeaef9807bea891c52859f26e23ce339024f5e103b278

  • SHA512

    f5aae5c4ae3961f24034d133a5281850d1dd5d67ffc9d6cd7e30890a406ae94798397ebe232612fd7f7459b27820d3fb9775cde0f58bfc7cf6a91f318f856194

  • SSDEEP

    768:+XXThqcaDUiEfRHV0jIlaPM8Ft1IlITVb3yddhgUxwXoyT1C:+XtqcUUzHV0ZM8F+UVGFxwb1C

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • fb6a7532e6cba2c64fbdeaef9807bea891c52859f26e23ce339024f5e103b278
    .zip

    Password: infected

  • b33c768a9b6215733de13570a3049e4abaa787944d099bd8f93215df7abd5d43.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections