General

  • Target

    10530058242.zip

  • Size

    995KB

  • MD5

    38d381de59b7fe7c1b744792019be500

  • SHA1

    563938ba649ee698614d660f50c88b538ad57be1

  • SHA256

    14ad3cec441a5fe24f41769f17cf960225f7cf06c8285fe36ee02f68ade78333

  • SHA512

    f9609820c292f403452606729f144099479113f40bead27329324a5fb0d8c43cd320c5aa7574a1febc3b95c0b6cc463828215f2ab950a4a4c2c1eaf83014385b

  • SSDEEP

    24576:e+Xlebtjca9EGry0JbaPMY1vdGtxkYcEWAm5v4pcfjr5ufQG:e+VehvEGrPwkeHYo1t4QjrkfZ

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 10530058242.zip
    .zip

    Password: infected

  • 37f7454cb17f60b69531492a2ff287183fd9b6c9134f75a1ed922da77962ec0e
    .rar

    Password: infected

  • patched/x64/sx32w.dll
    .dll windows x64

    Password: infected

    c2fd8e59819c5a12b899e2739ba4c8ef


    Headers

    Imports

    Exports

    Sections

  • patched/x86/sx32w.dll
    .dll windows x86

    Password: infected

    c2fd8e59819c5a12b899e2739ba4c8ef


    Headers

    Imports

    Exports

    Sections