Resubmissions

21-08-2024 20:01

240821-yrh6hs1gjr 9

General

  • Target

    OrangeRemover_protected.exe

  • Size

    2.6MB

  • MD5

    71b058aa939294a995f598cf39cfedf8

  • SHA1

    252d2ff52f6238c587003ea57a3d8b262045e1c5

  • SHA256

    4a7491599332383fa223e844530e29335565655388c5502315cbd6d431ed6297

  • SHA512

    22ed588558121c9abb0497089f24aa8f17278fca973f0544e0780ab409cf574131671a75e25cd46b72e6e2407761a9ae325c2bc9f27fd9b31b85e1b6647ae9f0

  • SSDEEP

    49152:827XAJi++OvJYxvFScoTSEgYlJF0dQlx3uUwIyP6gxX9jHV:17XAJiOivF0S3Y3+Wlx3uUnCF95

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • OrangeRemover_protected.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections