Overview

overview

10

Static

static

8

Install.exe

windows7-x64

10

Install.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    File (1).zip

  • Size

    7.7MB

  • MD5

    dca9a6c28850f050e771ffb47a6cef36

  • SHA1

    a845102587af2321804413b80a54756f7b6a6269

  • SHA256

    ca75625b203b002472e3b5aad43277e0f3f109d16252f9a8b0854262346872e0

  • SHA512

    84d7a7efe2e6af81e5940bb2b8bf58ce99e3c014e18aab578dd51539e1e4bf165cd89944535e78f9798623f740b597f05917ea404becfdea49a7f6d34c9635f3

  • SSDEEP

    196608:WcHDQX6RnblfskQFoNH9TbtemHv5Qhs2P4:WgDQX6RbFs1M9TbfQ14

Score
8/10
vmprotectthemida

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

    themida

Files

  • File (1).zip
    .zip

    Password: 1234

  • Install.exe
    .exe windows x86

    Password: 1234

    a4308f82c6f6f467c58289d16d7acab2


    Headers

    Imports

    Sections

  • fonts/Alakob.ttf
  • fonts/AlaskanNights.ttf
  • fonts/Arggotsc.ttf
  • fonts/Army Condensed.ttf
  • fonts/Army Thin.ttf
  • fonts/BELL.TTF
  • fonts/BELLB.TTF
  • fonts/BELLI.TTF
  • fonts/BOD_BI.TTF
  • fonts/BOD_BLAI.TTF
  • fonts/BOD_I.TTF
  • fonts/CALISTB.TTF
  • fonts/CALISTBI.TTF
  • fonts/CENTAUR.TTF
  • fonts/Cabana-Regular.ttf
  • fonts/baby_csp.ttf
  • fonts/black.ttf
  • fonts/bold_0.ttf
  • fonts/browa.ttf
  • fonts/browau.ttf
  • fonts/browauz.ttf
  • fonts/browaz.ttf
  • fonts/deathrattlebb_reg.ttf
  • langs/Arabic.ini
  • langs/Belarusian.ini
  • langs/Bulgarian.ini
  • langs/Croatian.ini
  • langs/Czech.ini
  • langs/Danish.ini
  • langs/English.ini
  • langs/Farsi.ini
  • langs/Finnish.ini
  • langs/Hebrew.ini
  • langs/Hindi.ini
  • langs/Hungarian.ini
    .ps1
  • langs/Indonesian.ini
  • langs/Japanese.ini
  • langs/Kazakh.ini
  • langs/Korean.ini
    .ps1
  • langs/Kurdish.ini
  • langs/Lithuanian.ini
  • langs/Norwegian.ini
  • langs/Russian.ini
  • langs/SimpChinese.ini
  • langs/Sinhala.ini
  • langs/Slovak.ini
  • langs/Swedish.ini
  • langs/Thai.ini
  • langs/TradChinese.ini
  • langs/Ukrainian.ini
  • langs/Uyghur.ini
  • langs/UyghurLatin.ini
  • langs/Uzbek.ini
  • langs/Vietnamese.ini