General

  • Target

    goestoonw.exe

  • Size

    4.0MB

  • MD5

    ed5ed973b2f6bf4e5813314254e692b4

  • SHA1

    c254add012db5c49aa94e2da59af688562d2e825

  • SHA256

    8bf3339f913e685ad79a71e31a0eedf2c700731ad2b49541ce2f155100a90e4f

  • SHA512

    ba368e9473dd3e524039dec2ccc3d5863f704f0be8d34897df49510b3f5bed652e6423ede25772434b9aa3807289ede472f10556ba26baf2555037520eb7692c

  • SSDEEP

    98304:8Xbfs6Be4Ex/UYJzTXfCM3eu4KWFcdQBU5uXjsMxFs:8XbfsUI/1zT53elKWFOvMxFs

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • goestoonw.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections