Overview

overview

7

Static

static

7

WizardLoad...ed.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    shipping.rar

  • Size

    43.7MB

  • MD5

    fec89e1a4140d40ec6e1cacc063f6c1d

  • SHA1

    f99222beef8b8a20a5251a00eb79541e16af93e8

  • SHA256

    99696de30bf63e482eb04fe00c97a0e4dc54b921e7f4f5acdb03203e35e3ac02

  • SHA512

    9a546aba57fe38dd38fcd888ca9748383dc42da26c2716916870c0a644917972673750739bd89acabfef835888d6ab57c7ee990bfa4b34df04c5042ea553ed42

  • SSDEEP

    786432:t/+BKOiZhUVlrFUMg1BbSXYHnvE52T7x7F2cT3bbuqR5PhmhTg2nmw+8Ko1+vDK/:t/+EOahUyMMxSXYHnvYc7VFnTLbbDmfB

Score
7/10
themida

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida
  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 6 IoCs

    Checks for missing Authenticode signature.

Files

  • shipping.rar
    .rar
  • WizardLoader_protected.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • avcodec-61.dll
    .dll windows:4 windows x64 arch:x64

    fc13fe780e6f14ac97f52d607c8d794b


    Headers

    Imports

    Exports

    Sections

  • avformat-61.dll
    .dll windows:4 windows x64 arch:x64

    d47b9e21a187c94002a0cfcceb749b5d


    Headers

    Imports

    Exports

    Sections

  • avutil-59.dll
    .dll windows:4 windows x64 arch:x64

    20747eb030e694dd95cd6808e91b4383


    Headers

    Imports

    Exports

    Sections

  • swresample-5.dll
    .dll windows:4 windows x64 arch:x64

    dcc7974443946203ef9c2fe7759ed83a


    Headers

    Imports

    Exports

    Sections

  • swscale-8.dll
    .dll windows:4 windows x64 arch:x64

    eaa43339c08af90c3baf5937e4964289


    Headers

    Imports

    Exports

    Sections