General

  • Target

    Windows.exe

  • Size

    325KB

  • MD5

    5a785333d8d1995334c541b7056871f0

  • SHA1

    36a1c162403ef205ad75b8d67c318141bf7d4d28

  • SHA256

    feeae001bbaa7ddceb97cae2d68e3dbc1f333bebbf4cf97885a1167d4d79ccdf

  • SHA512

    5c0b2d7665ba06236a8c9be8ba45a0b4543b3db5f91e317762c94c2ba66d6f353110d1fa5b0373bbee57eea6bc4009b3e4188613d4bd967bb11d9dc9e9d1affe

  • SSDEEP

    6144:G6vu0bpK1YDBqHumIPZD/aAXKXQ8vuXXh+biC9hOhpR6kbkb88VZMvnNUIK9wqHv:G6vuCU1YDBqz0m88VZM6rkzD8iFW

Score
10/10

Malware Config

Signatures

  • Detects ZharkBot payload 1 IoCs

    ZharkBot is a botnet written C++.

  • Zharkbot family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Windows.exe
    .exe windows:6 windows x86 arch:x86

    86066554454deea625edb22af31c51bd


    Headers

    Imports

    Sections