General

  • Target

    loader_bluepill.exe

  • Size

    8.9MB

  • MD5

    c7ba90393c994de84ebae1d035f9be9d

  • SHA1

    ca58cc1acc630f879057bd01c7c12eb674aaa7ed

  • SHA256

    25a4c8dc7c5db71d1a449ccf57e9d22467bd562446cb65a1b715670e87dfe6a7

  • SHA512

    ab6cdfd5b5f84e4667443c6b668c5b8be4621bc6ab04081776162ca59e14f617f2363d3c2cdf7bc4ca5d68ffebeef34c190666b61fade15f76613a7c43544677

  • SSDEEP

    196608:r0rNFmkF/jUGFgWteROdMQ0UMpBXj/A9eQR4vLYCDG2Ki8:IRF91oGFvlbEpy9JR4vLk2M

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • loader_bluepill.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections