General

  • Target

    FFWsUpgrade.dll

  • Size

    4.2MB

  • MD5

    d87446632c1f0835c63929860f3ea0c5

  • SHA1

    910e6d48484f2626ccbebdf348b7e8f1e880dde8

  • SHA256

    1bf2826f0ebc20f65044e003d1c36f61a3b13fe712a9609443092e3d63c0d9ac

  • SHA512

    153f3f9ee5a613943f08069ef6bd6458ffaba1a3e424b18122c3ecd45089cbff727925e24cac761131818a32ad6faa3e6ed7b0c6d8e7a1312420a76100782e2f

  • SSDEEP

    98304:Pf3nBVNVPlLON3iqTyFjUi9E1QEdmhygc51W3rUh5Qo/zS:PfDlLOIqWlfE1QEBgoW3rUhq

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • FFWsUpgrade.dll
    .dll windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections