General

  • Target

    Wind.rar

  • Size

    4.4MB

  • MD5

    fa1c4226b776b5bd72344c9e861dbf6e

  • SHA1

    8175c4f7b1e9417808f618e3d3ad52625a97536e

  • SHA256

    cad458e3400268ee078ebf493fcf8e5d2b23f8399bc06739737c03b26bca04a5

  • SHA512

    3fd92daba2d6c00395671639f24bca72488bc35504c8b3e75a54eace7e6cfa74c21a73332d45fd7d1ba1b41ea9bcdcfd5c02e9bf40d9c2438a7ca4bc158d9d36

  • SSDEEP

    98304:rfBCQGH3QjNTqzQ9MClKifVJnTB46e6RT47H7YbBTogcUfiHK1BgZks8FN4/:V9G5zAMClLHTB4L66kdUgcUaHK1OrwU

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • Wind.rar
    .rar
  • Wind/libcurl.dll
    .dll windows:6 windows x64 arch:x64

    86466c337c0f4054f390a6d67e4d3ebf


    Headers

    Imports

    Exports

    Sections

  • Wind/windinject.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • Wind/workspace/UQMP9VS6AJxBjr7.lua
  • Wind/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • Wind/zlib1.dll
    .dll windows:6 windows x64 arch:x64

    d879d2294039900ef484e0f01607f882


    Headers

    Imports

    Exports

    Sections

  • Wind/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections