General

  • Target

    $R1VWPUZ.exe

  • Size

    6.7MB

  • MD5

    1d2b1c49acc213b9cb14edc8222eb745

  • SHA1

    23537a503ab2270feb675c655af862c11db5e5d1

  • SHA256

    dee33915fb452e5b95890ba6eb36923bc522ba5b58f4f4ef662ce46130ab9056

  • SHA512

    63cf63a748af023deef80f2f943dacd221ac9e60100ab8a29f6e3311e84cd95898a2c37a5c5cd1771b130fb554b7c08901b2f9de14e2127858b2feedafb251db

  • SSDEEP

    196608:fYCiSu+P7sMr/WCPiiUJ/ySzxIIs6pIQnykWhsTnbck0:FJuG7sMr/bVUJBzOIs6+LkWhsjba

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • $R1VWPUZ.exe
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections

  • stinger_server.pyc