General

  • Target

    lvs-workspace_protected.exe

  • Size

    4.2MB

  • MD5

    de2112c4aef1d508d8f4a82210831372

  • SHA1

    9be27a21be19290650837efc68cf34bd7fdaef8f

  • SHA256

    bcab0cab723613157d850ded1dc3a0e1693cc7dbc4abe6617d25b919be3c3249

  • SHA512

    9e5b4152e6f10c36361718f5b63efe81991d27eccc9f0d0f3c843d721326a6d2e16918f076e29e1cadaa422aaa5e0f160040109ce14d63c80c3563065613bb63

  • SSDEEP

    98304:HS3fNM5wwG6Af0dmKzahOcjvWYvub19uKsx06171+sUHeLyRNt:y3lM5wwG6AfhKzGljvr4T6R1+s4Qst

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • lvs-workspace_protected.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections