General

  • Target

    scriptwa_protected.exe

  • Size

    19.6MB

  • MD5

    7064ddde5bd29a90dc81a1eabcd3cbc0

  • SHA1

    c4107b39d07d56edd88dd50ae3817531584abe7f

  • SHA256

    47c607739b5e24699ac429cb4b06cb8568c6850bd57a6c4fe537c67de31cb0a3

  • SHA512

    373825f121679f5ab664632c4b99db70f071a60711abfb41f71fa87aad34e0d748ce43e7c8cc9dc0e37f499d78b8ce0a5304d3413356a93e312ce52f7d67929f

  • SSDEEP

    393216:93/W7I+cZaomr+dBeZ0t3Ind08kViquyVahmrzWqLEJ4:VLpZaokwI8qhjhmrKqLEJ4

Score
7/10

Malware Config

Signatures

  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • scriptwa_protected.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections