General

  • Target

    zgbwfNgItP.exe_pw_infected.zip

  • Size

    5.4MB

  • MD5

    8c9c135d0ccd490e0d09004881d2f2ce

  • SHA1

    69326bfbd1ab2bf75509c75bf6520461fb47a72e

  • SHA256

    a2fadd41cc58a9ce0ad70e392ae87dda8e1976192a9420654417e46a4b7dfefa

  • SHA512

    050b6659b0f33cf9721eee0895f403719dcaede107cdc47058c07de8d04150392f293cfe926bad6d293003076cf69624ef1a4151a63d19cde611fed679aee19a

  • SSDEEP

    98304:5mUyHJ+J12lmq+6gISpkdzKMBSCiWQ/1Jpg4p+9:5bgg/gqJmKMwCixpg9

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • zgbwfNgItP.exe_pw_infected.zip
    .zip

    Password: infected

  • 0x002e0000000186de-19
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections