General

  • Target

    RBG_BYPASS_1.0.exe.fdmdownload

  • Size

    10.1MB

  • MD5

    b55a4e6109c1417d30d845752c2eb74d

  • SHA1

    f9f2076b773ef567408c0ced61f6987cba9362f3

  • SHA256

    d3df65103a4ed1e69fb74b9bea5dad80734ed1b1232d2a0301056983634888ab

  • SHA512

    41b63879b47e0f20e9645fb0ceeefd829cbf1e94ff84855f81ef0e0bbbc28a71053e2ed8500f3009170d78f16210b04d2fc70217c7e944a312c75c32d930b96f

  • SSDEEP

    196608:xryE7AZcaxyIwqYqdn8e1KkXAdRY5vMxV3gOm9SDwvTZmkcyv1:tyEJyyIYUnH1KkXmRY5vM7QOmkwgyv1

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RBG_BYPASS_1.0.exe.fdmdownload
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections