Overview

overview

10

Static

static

8

Install.exe

windows7-x64

10

Install.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    File.zip

  • Size

    5.3MB

  • MD5

    0ab90db3408d293ceb41144842d3f4c4

  • SHA1

    af0a0569cff17b26b41f6d5337b578dff06aff34

  • SHA256

    cd6ffb7b4348f2812429e2822db80b59d6d10f658754f96c8bd4bfea748f1ef2

  • SHA512

    54f338b25887d25d60a7f83a4e7adc1076709a6012702b7f478bf105cb0e26bffb721f5771d6bbdc0b09a3981ceb66ec3b2634b4dfdbf8ade103afe1c8a9a71a

  • SSDEEP

    98304:jxFg1dWsw/akS6tHAI0t2/2Fgibet8O3uV0LWuVmiBU5nR:NF8+3v30beZ3u/H+U5nR

Score
8/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect

Files

  • File.zip
    .zip

    Password: 1234

  • Install.exe
    .exe windows x86

    Password: 1234

    b0a438491df559e2ae875aca71787ff8


    Headers

    Imports

    Sections

  • langs/Arabic.ini
  • langs/Belarusian.ini
  • langs/Bulgarian.ini
  • langs/Croatian.ini
  • langs/Czech.ini
  • langs/Danish.ini
  • langs/English.ini
  • langs/Farsi.ini
  • langs/Finnish.ini
  • langs/Hebrew.ini
  • langs/Hindi.ini
  • langs/Hungarian.ini
    .ps1
  • langs/Indonesian.ini
  • langs/Japanese.ini
  • langs/Kazakh.ini
  • langs/Korean.ini
    .ps1
  • langs/Kurdish.ini
  • langs/Lithuanian.ini
  • langs/Norwegian.ini
  • langs/Russian.ini
  • langs/SimpChinese.ini
  • langs/Sinhala.ini
  • langs/Slovak.ini
  • langs/Swedish.ini
  • langs/Thai.ini
  • langs/TradChinese.ini
  • langs/Ukrainian.ini
  • langs/Uyghur.ini
  • langs/UyghurLatin.ini
  • langs/Uzbek.ini
  • langs/Vietnamese.ini