General

  • Target

    proton hair.exe

  • Size

    5.9MB

  • MD5

    7b36a62976cae81fc3e773895a2f09eb

  • SHA1

    e7c4f3d66ccc6fd89d0fce19cf971fc7f1c12b4d

  • SHA256

    a60f629e541d8a51838e40cb1d207c79ff22b6f59cfb8c4af6496f23e86bfa69

  • SHA512

    bca0bd2f8e8ee45dd6aac5d217ed960a1f066b7e3219dbad1ae7965a11613b0177e43bbeea89fec1f8675a926438a59348223b13d55657ee6bb38d7774897750

  • SSDEEP

    98304:vuNcJEmD6vuf5d2yYZYeQjWmVF9yr5Q8CP56v6Egs8BZtZJC9us8NYa5DJS5Nf:1JEmXd2yYmrKmVXyrWtUv6EgFBZt/O84

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • proton hair.exe
    .exe windows:6 windows x64 arch:x64

    Password: sigma


    Headers

    Sections