General

  • Target

    paid bla.exe

  • Size

    3.3MB

  • MD5

    5f876b340b56f98e820816ec05e56d34

  • SHA1

    3bcdb73f1672e21776cf0ce0c96c8d5496f91586

  • SHA256

    08cf4a012c0aab62dc068e7a20fd1582f215f927c4185481da60ada9b636d282

  • SHA512

    52497f6e6235da94dcfd84570df876905102e60b5ef030a6f445649c7b789574b09794a47640c27dc4d78fea0efd67cf1578532c8112ae24057da06091901cb9

  • SSDEEP

    49152:kKtU2HL/scLu2asJ5RGCBF1hdgKtS5jwiCmNAlNsYmYmWA5IxfRU2Sph0afojHBX:BtqfsrgqSKA5jJCuAluvWA6fUD+0oB

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • paid bla.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections