General

  • Target

    nottek_alien_build_protected.exe

  • Size

    4.5MB

  • MD5

    b9256dc934925604d6a627ac33d6d45b

  • SHA1

    2235035419177c381f7e6a23fb390e199fe9c504

  • SHA256

    8a88d5bd895f787400de468eeeac5740a65810a18e2c09643b361ea86bf27807

  • SHA512

    313d007e6a9958cf73b3c2c7e95aa6ab6f437eab868c536a1a645ddd05745600b867960ac0867af248d85df709a3f391e53aa90ad7103528bc486718fb0fd137

  • SSDEEP

    98304:IAYdnBXJ5Kj93Yl955NnAVN4+58/b7drn49Xp1U09PUjlRzt8BF2Xe4FyurjtQR:IdBXyOlH5qVN4+5hZ1DmjHlO4Eurjm

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • nottek_alien_build_protected.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections