General

  • Target

    934dd6cd9571839de7c40a6d26881b56759bd1267a5f4baab39e47f42c8c8206

  • Size

    971KB

  • MD5

    9f727f8074ee96ebafec98ce52ce9686

  • SHA1

    24eb44b7df3b0feed72667dfca25ec2d754de591

  • SHA256

    934dd6cd9571839de7c40a6d26881b56759bd1267a5f4baab39e47f42c8c8206

  • SHA512

    dcf4158d16fd82f1a9e176e45f5907cc3770abe0911fed9dfc39ef097ffba80eae3f76b29079633c6799f8a10053eb7a57d81c231b65b0bea41bcbfa41532682

  • SSDEEP

    12288:FQoNdlQfjQfRti8d1+2efpThJ/V8XIB5Opg+DBxRhNGZmK:Fr3ufph4XID2RK

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 934dd6cd9571839de7c40a6d26881b56759bd1267a5f4baab39e47f42c8c8206
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections