General

  • Target

    f5a58c883ae4533e9f05a18a459244006fa511fb4885710c217b039cea92fc4a

  • Size

    561KB

  • MD5

    5038ea3c8da7e50c2cc49c0ac49c4557

  • SHA1

    f1cce47014cff7f9c9779cf0989acc49541cc393

  • SHA256

    f5a58c883ae4533e9f05a18a459244006fa511fb4885710c217b039cea92fc4a

  • SHA512

    3ee31a0464dcbf0d36f9a9fb037a881e24bb4bf6b7db93a4784c9e38bcfaeecfc42e08dc7c8fc0ed7a225816c090a88d2b9156147a3ea0972781a78d30728482

  • SSDEEP

    12288:GQA1HKlCFhJtM7e5IJDDXx527UAjuDrj3hKy63KG1mDpS4:KRFWIIJve7Uucp6yDg4

Score
8/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

Files

  • f5a58c883ae4533e9f05a18a459244006fa511fb4885710c217b039cea92fc4a
    .zip
  • cftyfzhq/[散人]CF体验服转换.exe
    .exe windows x86

    93aaad62ff5dcbd3e0634a3639803e79


    Headers

    Imports

    Exports

    Sections