General

  • Target

    IDf.cab

  • Size

    14.2MB

  • MD5

    3f17ef64fe54619016cce8bdb21f5c20

  • SHA1

    d7b3054b5bca6db4d5eba5a663e9f6d8c40d0561

  • SHA256

    c3001c3c4bd90844e3eff7860964b2fd93bdb84a4b6339023dd7bf2204c25afc

  • SHA512

    c1dd3b95f2f471b63e72450f6206d07e7e5c9b1e0b8f2866af7a358f99c92d5b28d3d4b37915224b8c14003170985dddaf5193e37b08e778fdc76f8f2708e9b5

  • SSDEEP

    393216:a5h+NAmqhSZCd5GV7zE98QTxuVY59WQ33eqZu:iXmqh+Cd5GVovwYiQeL

Score
8/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

Files

  • IDf.cab
    .cab
  • g2m.dll
    .dll windows x86

    f37b132339e85420f2ba304cf06ecffb


    Headers

    Imports

    Exports

    Sections

  • g2mcomm2.exe
    .exe windows x86

    5419c6d0b7a37c6f48c0d961a0d909db


    Code Sign

    Headers

    Imports

    Sections