Netskope Threat Labs

FILE-IDENTIFY Armadillo v1.xx - v2.xx file magic detected

IPS-SWG

1 SID: 23605

Detects the code signature of Armadillo packer versions 1.x through 2.x, which wrap Windows executables to hide their contents. Packed binaries frequently indicate malware, since packers evade antivirus scanning.

No cross-references or related blog posts found for this signature.