General

  • Target

    wind executor.rar

  • Size

    4.5MB

  • MD5

    8c568e6a3ae730702f4ccbdf88526f64

  • SHA1

    4912b0c1d33ab70639724b81f40648f95405b033

  • SHA256

    a7bd715ae5dd68f6d91051f5036803e5bfcdf95f9d146b4a0e779798a0dca5b7

  • SHA512

    2f1a1b496baa4112934049362f0b671fc5ff11f80ad9cd8e6eaefc215dc4ae13b661b0d457fcd453a900ad105b38e1d8c0a8d11c5d3ec9ebfcd9ae1170f32d55

  • SSDEEP

    98304:wRpeZuJNHVlPH8mdlkE9u3wD95iy8DFY8GtHV2pJzuialQ654OGZxbPGqS:wzJNHVlPHnPN5z8DFYRGJzOIZxbuqS

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • wind executor.rar
    .rar
  • wind executor/libcurl.dll
    .dll windows:6 windows x64 arch:x64

    86466c337c0f4054f390a6d67e4d3ebf


    Headers

    Imports

    Exports

    Sections

  • wind executor/windinject.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • wind executor/xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • wind executor/zlib1.dll
    .dll windows:6 windows x64 arch:x64

    d879d2294039900ef484e0f01607f882


    Headers

    Imports

    Exports

    Sections

  • wind executor/zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections