General

  • Target

    FZ-x86_protected.dll

  • Size

    2.7MB

  • MD5

    e538c557958696dc683e380cc4cd4d36

  • SHA1

    1b9a258a20d77fdf23f761fe17042241edb9205d

  • SHA256

    c3be4afee7bb35f0a5d0eb533e2bfc28040f759dc61d933df60338d83b01df16

  • SHA512

    8886268f1c659196970ab5b08b237c81a5fe342ab4ab137b74525e7e04f2560988dc4a5b3bb1e16674ed842f0ea82c6885c9001a419060d0d75d4a3972451676

  • SSDEEP

    49152:cBamJZR4NkAFdycGc+NshWyoFnW0CLl7agDqpQyZe4Czd0CasK2rhKftAC:cBDQXFdJa6AFW9DyeVza2NKff

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • FZ-x86_protected.dll
    .dll windows:6 windows x86 arch:x86


    Headers

    Sections