General

  • Target

    overwatchdrvlessstream.exe

  • Size

    6.9MB

  • MD5

    14d98087ce28566d3f033699c48faee6

  • SHA1

    f317aab1046d413a66788f049fbad6b4d4a03551

  • SHA256

    872e23e0da4a8c03e90ce4a62ddf8cca81a72644cb807668fc20f1e2e8a1a342

  • SHA512

    5c56a2b4c9eaa68f68f0319fedc300c550af95557a457286e2e3d5dadf5ad8ad6171c97e83a460f841c3202b5f729dcf657c72bdddcd0843563c1c2fc7ae0180

  • SSDEEP

    196608:XfaEDi0oTMaK0k8NEzM5oSXn+KxJffmF2EfJ9XxjAkO:XHDVgeTGgwn+iJgf3hjAp

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • overwatchdrvlessstream.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections