General

  • Target

    Bald.Win_New_Temp_Swoofer.exe

  • Size

    4.6MB

  • MD5

    76761b94d0187562e9acc8feb0d36111

  • SHA1

    40d118971e1c9e1e96264b23772ba0ec5e159a0c

  • SHA256

    d02f513e1673e5012e916fad43e0672ee0ff9cdfbc0733401b9b8fd4bd88d1f3

  • SHA512

    d48731994aae2c6f7b86edf22f843913568ade13e482154b71798c7b37b62e617c0f6960b3c9ba8db5c70d173ff0ef864f9c2467d7db6fb5d617a88a301c1423

  • SSDEEP

    98304:L/hllE2G7C2b9cH1UWzfW4Npy2K176ylIqdF8J8mK98wbRNVGllXLTPhCPzH00pE:LxlCcH1BSBvrltsY9jDqXLVaL7u

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Bald.Win_New_Temp_Swoofer.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections