General

  • Target

    temp.msi_protected.exe

  • Size

    6.2MB

  • MD5

    8384752182aabedf2730a56b979b444c

  • SHA1

    9791d2e97b9036bbfb8b53db17bb65239a6fd924

  • SHA256

    92fda591f57145217af68973349be5a0970b4bd3e99477829fb3e705a39b4d68

  • SHA512

    aac466f3170b10e745a5e0f9b01d82136c3cc026de2bdd28d6bdd2fa6e197ee9b65c86fcdf86eba74ecb5f7622abed3297562e3e4f76b254c52ad262e64bf248

  • SSDEEP

    98304:9mUL2orEFYCzDWG54mt4L9Z2iL/fD6WkwIoy1wF/WWQWtCrk3BC:QUqorEFYCyPL9ZH6xoZJWBWtCrkRC

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • temp.msi_protected.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections