General

  • Target

    a1a1cefa0b6c2e29f546fee629b9503416e5a631f554e759f9e8a1fa25737573

  • Size

    12.4MB

  • MD5

    00755c34730209aa7e811098b0d3a4b3

  • SHA1

    737b9f38b9c8c5b9711e8e62e0c01aa564688e5e

  • SHA256

    a1a1cefa0b6c2e29f546fee629b9503416e5a631f554e759f9e8a1fa25737573

  • SHA512

    8408bbbcdd9e73b0ae838d513243e16dc78042d9a755df836391e075045333397be0b7b1cd14679d297d1c982fe3cea0e4d42aeb9b7b538538a5000fca7f3eda

  • SSDEEP

    393216:pvKP7OBCsBtNK0rngEBUMuhcMwMK34cbj:5Kj+tIygEe3NKVbj

Score
8/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

Files

  • a1a1cefa0b6c2e29f546fee629b9503416e5a631f554e759f9e8a1fa25737573
    .zip
  • Ӱ1.4Ѱ/BkjjgGzzZ.dll
    .dll windows x86

    b76b999878aa3ba769f750a7212b9800


    Headers

    Imports

    Exports

    Sections

  • Ӱ1.4Ѱ/Config/Sky/1.blc
  • Ӱ1.4Ѱ/DCckoLf.dll
    .dll windows x86

    a652aeeaa7d04c703844261e0b03b46f


    Headers

    Imports

    Exports

    Sections

  • Ӱ1.4Ѱ/NKT.dll
    .dll windows x86

    0a7711c0e412cc73550f2f8f30fbc495


    Headers

    Imports

    Exports

    Sections

  • Ӱ1.4Ѱ/WS2HELP.dll
    .dll windows x86

    db111001b1244590f5322ec622db6241


    Headers

    Imports

    Exports

    Sections

  • Ӱ1.4Ѱ/longying.dat
    .exe windows x86

    d519768f201ab30fbb4b5a744bafd6e3


    Headers

    Imports

    Sections

  • Ӱ1.4Ѱ/longying.ico
  • Ӱ1.4Ѱ/report.ini
  • Ӱ1.4Ѱ/vjPzDL.dll
    .dll windows x86

    b76b999878aa3ba769f750a7212b9800


    Headers

    Imports

    Exports

    Sections

  • Ӱ1.4Ѱ/wdq.dll
    .dll windows x86

    4361198fb72f8ea7fc38ec587a3f52a7


    Headers

    Imports

    Exports

    Sections

  • Ӱ1.4Ѱ/Ӱ1.4Ѱ.exe
    .exe windows x86


    Headers

    Sections