General

  • Target

    celex_reversal.zip

  • Size

    56.0MB

  • MD5

    c001fe53ade38fec4d3169ea7ef23775

  • SHA1

    7adf032ca03a9c437b3020416c49265ba581a60c

  • SHA256

    3dd1900ee29fe6fe480a4d8a5c515f92645d681a5f74f04d4473611b47482321

  • SHA512

    e0cdf030734e11da981c46c9d676b7fe5c2d52134b815e98853491f7b31dcdad2f46e1fb1db9d9153db003f203799aa6ed4b91152e11be71474d08ead8c1d814

  • SSDEEP

    1572864:4j3rXm9mi4CZdbSGIdfyDX924vmOBoHHwMOJ1xnQ/KWPJqCGqCFvC:4j3rXm9UCZdb3Dt24vm8oHHwMOJ3nEKA

Score
7/10

Malware Config

Signatures

  • Themida packer 2 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • celex_reversal.zip
    .zip
  • mapper/unpacked_map_1.exe
    .exe windows:6 windows x64 arch:x64

    19e9ee84f1fd91d916e63dcc2307f8ed


    Headers

    Imports

    Sections

  • mapper/unpacked_map_1.exe.i64
  • usermode/unpacked_cheat.exe
    .exe windows:6 windows x64 arch:x64

    e08aef3cd43d94373214f60eb14bac99


    Headers

    Imports

    Sections

  • usermode/unpacked_cheat.exe.i64