Overview

overview

10

Static

static

7

EkraHWID.exe

windows7-x64

10

EkraHWID.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    EkraHWID.exe

  • Size

    3.8MB

  • MD5

    4bd1e1e5d6b2a4935b4f88f1ef57d384

  • SHA1

    961f94e7872f54605124bb19aa288c1553ff15b1

  • SHA256

    1bf573ee2f787869719510c6860adc85b676b5aba6ad5c55822c872e8039d3db

  • SHA512

    e5efa61f8600442fc700dc7f878de6ec88b77f662539303ccef42074a2258bc11bbab20c64ebcdf623908f106eea232ca680905c60a25bd5b30766a719747608

  • SSDEEP

    98304:5XJof7K5JEyUal+KH4kpc+DX/0HG9crhwFbH:5XizKHEyUZKYODj9c1wB

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • EkraHWID.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections