General

  • Target

    1.zip

  • Size

    804KB

  • MD5

    efcd3c5d5908e1a948b78f5410f7a1a5

  • SHA1

    8756c749445330224d0d8836c8ab67cb189d40f2

  • SHA256

    9aeb2ab8f298f75ad266d460a02f9f9f2b106b604a471dcf1d2040a30fa45cd7

  • SHA512

    d005aafcaa031a69f0ec215c4e290d06220562270607b57f1c5cc7b4d3fbab5b86e3172bc6619120d8954fae4e97221cdd8121b11f10325f4ba4733b2ef47896

  • SSDEEP

    24576:TbK04wmWLt9d81dVozpcHqP6KimEWDXVLC:TbehWLjaVo1cm6K2WDFu

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 4 IoCs

    Checks for missing Authenticode signature.

Files

  • 1.zip
    .zip

    Password: infected

  • 未命名文件夹 2/scrnshot.dll
    .dll windows x86

    fef73e06943614a493f10e77cff66fd0


    Headers

    Imports

    Exports

    Sections

  • 未命名文件夹 2/wrx.dat
    .dll windows x86

    1ed34fb0eb0f584b79f0efb36ec4af2e


    Headers

    Imports

    Exports

    Sections

  • 未命名文件夹 2/点击此处安装语言包.exe
    .exe windows x86

    a5a89320cd6111ae7f863c31fe276a5a


    Headers

    Imports

    Sections

  • 未命名文件夹 2/点击此处安装语言包1.exe
    .exe windows x86

    d2bbcf1ab2e8c442403e0b68f5dd61aa


    Headers

    Imports

    Sections