General

  • Target

    b4f12274711972ec53e5921c9a01597e6c1f1efadec48f71445317215f1c7aba

  • Size

    2.8MB

  • MD5

    da796be0b773f18c70357f59d06da86b

  • SHA1

    810143d8dab0d80f6a59bd3c914c3f854e72bdf5

  • SHA256

    b4f12274711972ec53e5921c9a01597e6c1f1efadec48f71445317215f1c7aba

  • SHA512

    4df9147394e8349e332e8a45447a9c6e7f81bb49a002d7afd7f26216b27750ac19be91c0411380c31d6d40d07bbf94d77cc429861e63ee27fb9de2ce13e0d600

  • SSDEEP

    49152:eQCw50lLEA+DCeSMQeDwSXelf3WQTmxplN0nmFZQ6pkvS7D0TrAKHBx2CfLkYZo:IHlRldMjDwSOlOQixF0mEEemkrHBxNYH

Score
8/10

Malware Config

Signatures

  • VMProtect packed file 3 IoCs

    Detects executables packed with VMProtect commercial packer.

Files

  • b4f12274711972ec53e5921c9a01597e6c1f1efadec48f71445317215f1c7aba
    .rar
  • bibiDown.com-飞天v1.18/fly.dll
    .dll windows x86

    e34023be2097a147c5220cd670e91fd9


    Headers

    Imports

    Exports

    Sections

  • bibiDown.com-飞天v1.18/fly.ime
    .dll windows x86

    860a8adcdb8410fab8dc154b7a26d124


    Headers

    Imports

    Exports

    Sections

  • bibiDown.com-飞天v1.18/md5.txt
  • bibiDown.com-飞天v1.18/msg.wav
  • bibiDown.com-飞天v1.18/会员购买.url
    .url
  • bibiDown.com-飞天v1.18/比比下载站.url
    .url
  • bibiDown.com-飞天v1.18/说明.html
  • bibiDown.com-飞天v1.18/飞天.exe
    .exe windows x86

    0f95ccb81dc2502b61db7c89b72398dd


    Headers

    Imports

    Exports

    Sections