General

  • Target

    newstuff.exe

  • Size

    2.8MB

  • MD5

    336f7966c191a9e6dfd200d2cd8d3c32

  • SHA1

    1c03696f753c5a1bf24ea7c5e6c100495b1777b2

  • SHA256

    032f446eb7b64b0990859c447c27d4e11df6f078427ed78c45442b069ee92623

  • SHA512

    9836bc61664d378d54006faa66dde11af4424bb2d1226e6faaf0f7c683aa0cd872c9518a2aa71e3db24c9ff91101a9e300e90e007275fcbfdc76b9b38b40d1b7

  • SSDEEP

    49152:XXzhpDtKSK1cb8PGK+Tfuqmpc3elWo8GnQAsYZEVHfa/mF:XXzhW148Pd+Tf1mpcOldJQ3/VHye

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • newstuff.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections