General

  • Target

    YoruBlox_Wind_protected.exe

  • Size

    4.0MB

  • MD5

    6c797806a68ee33f62b22019c9a87b99

  • SHA1

    4f92c8767baa025128c525a0767e6fcf1ea8e35a

  • SHA256

    c4eb6dab7b0d3e4f7379288bfb9220b033672c14d552aa0ec341ae313fa2a337

  • SHA512

    fd946c624e93b5d196ef7eaf8b7bff077e9e94fe98c4d47bda18cfeb8882efca6c6d6c86ad0cbd4700affb5de2606f9719bcc1b74515ef3f8cece1eb92d7b5fe

  • SSDEEP

    98304:I30mLGNe0bnvIvSxI5wwtIBNQoF3JJnvhqBEa:HmLGN48I+wtIBN1FZ9wBb

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • YoruBlox_Wind_protected.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections