General

  • Target

    6575cb8ea793ebbc9784c0ccd1d4e389285f16fca36858df8c3890e787ccbeb4

  • Size

    31KB

  • MD5

    f4b742d73082ae022111e7eb45ba5e4a

  • SHA1

    0f67450a380859e009c5a80d0d71f1e1e41eba11

  • SHA256

    6575cb8ea793ebbc9784c0ccd1d4e389285f16fca36858df8c3890e787ccbeb4

  • SHA512

    184277ef9569745e4e219a757c1b4a591b050bca4e7ad2cae2659fa7dd47569d8209d2df4e6717a0925f30fd297d883c36c67da1c3f7fb27680373b970d41de2

  • SSDEEP

    768:ay0gsuOwNYL6kfYbfqjRyKCJ/eezwfGji+gDwQYUFv1r4odEXJUS:a3xuI6fqjRBCJeJUiAQYUFF4BXyS

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6575cb8ea793ebbc9784c0ccd1d4e389285f16fca36858df8c3890e787ccbeb4
    .zip

    Password: infected

  • 59adf02507f77f68e91397e6434447e4ff4de87fdf635f70163831cba7cdbb73.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections