General

  • Target

    ef725d2c494a7406c6fac29ea50e9c249becef78299cb9da5032f38cc80ab681

  • Size

    31KB

  • MD5

    35b4eb9e381c311ce23c09e3cd09f06f

  • SHA1

    a0bdf00c814b4b40019222f48d3be066c921d695

  • SHA256

    ef725d2c494a7406c6fac29ea50e9c249becef78299cb9da5032f38cc80ab681

  • SHA512

    17417ad816bcdde8d49dd4b73389f8a1fa6a614c5edc65c21976bd59f9885365f1519e73014811f2b12015dc291eceb8f396421c1ad04976c6cee99728c6614d

  • SSDEEP

    768:dx+0S13SReqe0/iE00LlW/1gcZmMzCG1LhUcCyOnXqdVFw1C:dM0cCxjVlM1xwuFZh3HOnadXwE

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef725d2c494a7406c6fac29ea50e9c249becef78299cb9da5032f38cc80ab681
    .zip

    Password: infected

  • ee59809668bf98543a53d35adbb7dc216945deb6eaddb9340495b407446b75df.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections