General

  • Target

    w.zip

  • Size

    8.6MB

  • MD5

    8dd5d679894b18f3edbfe7e5e3f40fb9

  • SHA1

    b485c54a861e205dec7f2ef078d5d85b7f99f1ac

  • SHA256

    762469fc875c680452e9814a661ce493eff24b5c69c6f756fdadab44bb590c36

  • SHA512

    b95996db5b34d9d0a1c3e788722c9e1798cbee67d0d501fb4abc2656d2f088d6b7b58e463e4a1f4cef5266b3db8218a288e9a8091b17dc5c8ddebdae2e623e3f

  • SSDEEP

    196608:q1KRA3hK3au92RHlcOY7uQtzoyVmmBrD5JdmPyMPAu+c:oK+3hK3JUHlcYERc0D5NMPJ+c

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • w.zip
    .zip
  • w/Glix_protected22.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • w/cpr.dll
    .dll windows:6 windows x64 arch:x64

    09b3a2c15941eabf784ea161dc2e56ed


    Headers

    Imports

    Exports

    Sections

  • w/libcurl.dll
    .dll windows:6 windows x64 arch:x64

    9a4ddbe07217dde8376bb7c577388155


    Headers

    Imports

    Exports

    Sections

  • w/sigmahacks.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections

  • w/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • w/zlib1.dll
    .dll windows:6 windows x64 arch:x64

    d879d2294039900ef484e0f01607f882


    Headers

    Imports

    Exports

    Sections

  • w/zstd.dll
    .dll windows:6 windows x64 arch:x64

    163b42376483ef4dde972117fa0042a2


    Headers

    Imports

    Exports

    Sections