General

  • Target

    File.zip

  • Size

    9.0MB

  • MD5

    35a460be9884c5d087a9c2c440e88b90

  • SHA1

    a7e2b5d3bcb0f4e94cb574392bc34c7d7d60bfa4

  • SHA256

    7b241d6657a863d3df9b0ed571d1324483695cbddb12e1ac7ddd039ae1b1e59d

  • SHA512

    5d8144c0ed06ffc455b9b2c5ad78e887890c09e26bee0ba90f8f469f867738301963c62ca45d435f787874462ef1059fabdb5c92e81f15dff8971f49a2b39b42

  • SSDEEP

    196608:pcDlrgF3Uo6Ykx58t6a3/tfBgzgxN4fplnGqTfj8rI9j0PpEJr:poa6Ykx589Ptf2ymHVsr40GR

Score
8/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

Files

  • File.zip
    .zip

    Password: 1234

  • Install.exe
    .exe windows x86

    Password: 1234

    b0a438491df559e2ae875aca71787ff8


    Headers

    Imports

    Sections

  • cdp.dll
    .dll regsvr32 windows x64

    Password: 1234

    0e1a202dad98ab1e9ecba1e3421ad059


    Headers

    Imports

    Exports

    Sections

  • cdprt.dll
    .dll windows x64

    Password: 1234

    7dc6eafdeead3fe582715d4bde91237e


    Headers

    Imports

    Exports

    Sections

  • fonts/Alakob.ttf
  • fonts/AlaskanNights.ttf
  • fonts/Arggotsc.ttf
  • fonts/Army Condensed.ttf
  • fonts/Army Thin.ttf
  • fonts/BELL.TTF
  • fonts/BELLB.TTF
  • fonts/BELLI.TTF
  • fonts/BOD_BI.TTF
  • fonts/BOD_BLAI.TTF
  • fonts/BOD_I.TTF
  • fonts/CALISTB.TTF
  • fonts/CALISTBI.TTF
  • fonts/CENTAUR.TTF
  • fonts/Cabana-Regular.ttf
  • fonts/baby_csp.ttf
  • fonts/black.ttf
  • fonts/bold_0.ttf
  • fonts/browa.ttf
  • fonts/browau.ttf
  • fonts/browauz.ttf
  • fonts/browaz.ttf
  • fonts/deathrattlebb_reg.ttf
  • langs/Arabic.ini
  • langs/Belarusian.ini
  • langs/Bulgarian.ini
  • langs/Croatian.ini
  • langs/Czech.ini
  • langs/Danish.ini
  • langs/English.ini
  • langs/Farsi.ini
  • langs/Finnish.ini
  • langs/Hebrew.ini
  • langs/Hindi.ini
  • langs/Hungarian.ini
    .ps1
  • langs/Indonesian.ini
  • langs/Japanese.ini
  • langs/Kazakh.ini
  • langs/Korean.ini
    .ps1
  • langs/Kurdish.ini
  • langs/Lithuanian.ini
  • langs/Norwegian.ini
  • langs/Russian.ini
  • langs/SimpChinese.ini
  • langs/Sinhala.ini
  • langs/Slovak.ini
  • langs/Swedish.ini
  • langs/Thai.ini
  • langs/TradChinese.ini
  • langs/Ukrainian.ini
  • langs/Uyghur.ini
  • langs/UyghurLatin.ini
  • langs/Uzbek.ini
  • langs/Vietnamese.ini