Overview

overview

10

Static

static

8

Setup.exe

windows7-x64

10

Setup.exe

windows10-2004-x64

10

langs/Hungarian.ps1

windows7-x64

1

langs/Hungarian.ps1

windows10-2004-x64

1

langs/Korean.ps1

windows7-x64

1

langs/Korean.ps1

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Pass_1234_Setup.rar

  • Size

    5.7MB

  • MD5

    ad68d52dd948f29581087728a9cc86b2

  • SHA1

    fd396cb64a35328d3e46d41de06a3cc6bb205e66

  • SHA256

    de7b2ec7660dfa55841ae4d8ea48a85228872d46d89bb4d0b60b6503aaf18304

  • SHA512

    6b9c246ac7562eedb42c3dbc540cb329f3832896142ca8f484ce71977cd2b6051cc3baf8f116eccefcf484d3a751d0f16a4a06d92f3885ecf0933b1ba46f37a3

  • SSDEEP

    98304:Avb4iwXbbqk6eeSO9z86+GK/UGWR1STN5ntPzhlMh7/3SzLeqNaRHMVBdnq3A0r7:fJESFPQR1IN59iLCNNOMlKSyh

Score
8/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect

Files

  • Pass_1234_Setup.rar
    .rar

    Password: 1234

  • Setup.exe
    .exe windows x86

    Password: 1234

    f388431c4236c7d3533d88c7e0870384


    Headers

    Imports

    Sections

  • langs/Croatian.ini
  • langs/Danish.ini
  • langs/English.ini
  • langs/Finnish.ini
  • langs/Hebrew.ini
  • langs/Hungarian.ini
    .ps1
  • langs/Indonesian.ini
  • langs/Japanese.ini
  • langs/Kazakh.ini
  • langs/Korean.ini
    .ps1
  • langs/Kurdish.ini
  • langs/Norwegian.ini
  • langs/SimpChinese.ini
  • langs/Sinhala.ini
  • langs/Slovak.ini
  • langs/Swedish.ini
  • langs/Thai.ini
  • langs/TradChinese.ini
  • langs/Ukrainian.ini
  • langs/UyghurLatin.ini
  • langs/Uzbek.ini
  • langs/Vietnamese.ini