Overview

overview

10

Static

static

7

591b810327...0d.exe

windows7-x64

10

591b810327...0d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    113b63fe79a789bb9adb98b8ea7412e9f67efa0a2d70b5510aec5332e3104401

  • Size

    31KB

  • MD5

    cafcd900084d9f9eb29cb37df9f5fdb1

  • SHA1

    f2de42c17216951f5a15162352b1135a1a7821d6

  • SHA256

    113b63fe79a789bb9adb98b8ea7412e9f67efa0a2d70b5510aec5332e3104401

  • SHA512

    46e79244196ea109b77d06486248340fa9eb76d97949ccd24c5ae94de84686024f24bbcf66dcd1d7efa4ec0aa82338121c146715800517136ca4862cdc8dbbec

  • SSDEEP

    768:l1bft1WOAyJsv4OZSmRhPS0DAGldHTE7to6:Lb1sWQRhPS7GnzCto6

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 113b63fe79a789bb9adb98b8ea7412e9f67efa0a2d70b5510aec5332e3104401
    .zip

    Password: infected

  • 591b810327884966d4765c9b4fe1b6dac7ff52121b8b56a63b9966daf4ba800d.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections