General

  • Target

    de584dd4970a8099454611ee0c739ea8.bin

  • Size

    3.1MB

  • MD5

    8f55070b863703b1d52edd4b76d32812

  • SHA1

    2dcfddc9467451f652b27541b999cf1d2f1aa70f

  • SHA256

    45babf429230f0a0bad119aa47fab5820de9b4af3996340000376409c448a169

  • SHA512

    da8f5e480d63d836aa0daf8b3a362f2d339782b932580242fb4c6dd50a19120ad76a987ef8d9c763a255912379132c6760a157f0434bc0d82d35515cec74a631

  • SSDEEP

    49152:NwDhLYmFROiaUINT9smiRKdrYMhcKpE4lVLQlxWyoWjHIL0oSz0:NySiaVK6rNcKpE0Ql0cjHG0Q

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • de584dd4970a8099454611ee0c739ea8.bin
    .zip

    Password: infected

  • d0eff53cfd30f061451987b4e98205d81f9495e8f26def46aec15f7a4c171c20.exe
    .exe windows:6 windows x86 arch:x86

    Password: infected


    Headers

    Sections