General

  • Target

    69e7ebcaeaa61f75ec9882d8b1db2ca91e4b41a2eacb50b0ae18ecf0137e8faf

  • Size

    150KB

  • MD5

    924af142adf29eec04e5fcea888264cb

  • SHA1

    130c605a521593ca96907ec5325ad894d9fdf76a

  • SHA256

    69e7ebcaeaa61f75ec9882d8b1db2ca91e4b41a2eacb50b0ae18ecf0137e8faf

  • SHA512

    daecb0333a1054ceea83adab800d5b356f18e201dedf6ef7791b7361d7088ee9a97455c76dcc3dbe2c980f859c06f6e0b2a0eb8f36ac37307f10b80bf9ba181d

  • SSDEEP

    3072:uZJPBcjhJL51RwrqnCDkQbdEOe4kbV7Gu02mBVVdTPy:utcjhJN1RcVe42GuXmT

Score
10/10

Malware Config

Signatures

  • Detects executables packed with unregistered version of .NET Reactor 1 IoCs
  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 69e7ebcaeaa61f75ec9882d8b1db2ca91e4b41a2eacb50b0ae18ecf0137e8faf
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections