General

  • Target

    batota_protected.exe

  • Size

    4.1MB

  • MD5

    e8a7a7b6d6380dac4f5c0a6c592ce72c

  • SHA1

    b87256546ab7ac864c50627c755b669dc8c1acc8

  • SHA256

    1ac2ac1a43919029490631b5d063e461b15d8abc2a7107b77dca7e780bb3a713

  • SHA512

    0fe84929540575b0e9499f885317cb34a3142f7897f136395ac158e58a5beef68de5b0c19cb78e1505bd425bd0c3872bf8113592d5dafe96fb014a46d87afac9

  • SSDEEP

    98304:DQEbuB2d7YHZxKkywWyVRFyhIaE14KjunkrBJqT01:3dQlyp1hIF19jQgBJ

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • batota_protected.exe
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections