General

  • Target

    BidenWare_Temp_protected.exe

  • Size

    4.4MB

  • MD5

    e7b9bc2aeae772afe9cb1c4633496a02

  • SHA1

    176223f88f4f27d44599afb958d33445f7304f94

  • SHA256

    2a55a52dd74870b706402d930acbd8f02ef34dd4b496926fd9acfc4eed583c5a

  • SHA512

    7dd2b1a930cd41461d88a17db55f378aa1f31b27125d8cec5bb157bae99c920883f3f0004358cf4de7c530e2a55892e21a700251ca5dd06da011fd6db9d45496

  • SSDEEP

    98304:Vyyk2lhxuLBUvGttBUlly6rAIxfNdcBtDaen1miAfxQgwgYJjmYx0Bvn2Uf:Myk0uLftBElIIxfvyFbW1MJjnU2e

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • BidenWare_Temp_protected.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections