General

  • Target

    EP+ Blocker.exe

  • Size

    5.6MB

  • MD5

    52ed95bcb1d19ade8e2aecf8c8eb0edb

  • SHA1

    871ac315ea86e2ccf84795a56424c98449bec561

  • SHA256

    c2bad969f53de2edad173a42a1c0600e45003bcdd234576b64c77c0885bbfb5f

  • SHA512

    2299b8ac670078f834a7e33676de4fbcdb753a982e058d3cec6178da1f441accb2be8e284bdb3fcf7e80a2e4a70e05aee988919bfe5568948a2cca56fe0daadf

  • SSDEEP

    98304:be8jQh0KEz10hnqPdaTtPJYJAUUXtsFocOIxAsOJEs9/4CiXJPFxB/WZOo54+0q:bEh0D0hnci+u7JT9UdF/OH5b0q

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • EP+ Blocker.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections