General

  • Target

    2bc1ef0c42eb983ae1ef7f78f090e975b286baa80c1dca4af47fe17f4b03e7d4.zip

  • Size

    356KB

  • MD5

    b924184a8cb30dc7fe2cd123ad01f9f6

  • SHA1

    cd17290b83fa1929c10d22d10ea4dbbeb04598df

  • SHA256

    2bc1ef0c42eb983ae1ef7f78f090e975b286baa80c1dca4af47fe17f4b03e7d4

  • SHA512

    93aa6410cb432e77a05d0f40e016c94376bd0f2c0c83a8cf38b2720529b9858644bb581c28eb07e4d17b851ab6aad090e6e8dbef6cfdc5b77874343baef9c377

  • SSDEEP

    6144:VvkxvJ/ERkS80GQ22speQuMyRNDXtetrJBq5Y5f19Blms5HU7I3JJ4vnv:ZkxxMuS8Z2sppu/RudJBN5dpp07I3H43

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2bc1ef0c42eb983ae1ef7f78f090e975b286baa80c1dca4af47fe17f4b03e7d4.zip
    .exe windows:4 windows x86 arch:x86

    Password: infected

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections