Overview

overview

10

Static

static

7

1/一键�...�1.exe

windows7-x64

1

1/一键�...�1.exe

windows10-2004-x64

1

1/点击�...��.exe

windows7-x64

1

1/点击�...��.exe

windows10-2004-x64

1

1/点击�...��.exe

windows7-x64

10

1/点击�...��.exe

windows10-2004-x64

8

1/点击�...4).exe

windows7-x64

1

1/点击�...4).exe

windows10-2004-x64

1

1/点击�...��.exe

windows7-x64

1

1/点击�...��.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    1.rar

  • Size

    179KB

  • MD5

    41a7a56e3f7f5d2a78df02e52f101216

  • SHA1

    2e121774b20d463c0c2b4f099105a8d9c7511993

  • SHA256

    000f7727032e5e2990c79110728413c9cf29fe746a8e3081b88ec2dc4f91de37

  • SHA512

    b1a69666da06ffd72accdbe18a60a3fe4dde2ab06a0fa768ac2294429b40617b60f045b83c6ed7058086bfeaf47f1bdfec15577b0d081ee7bb6bae1638b84eca

  • SSDEEP

    3072:xO6K3MW9AbX0qJ5/zgRzxBlbTSHN5IwPIXsqGc4RstVQm5JNTw9DDX6:xO6dbP5AzxBlbS5IwPIcqGvRwpTw9/6

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1.rar
    .rar
  • 1/一键运行解除双向限制1.exe
    .exe windows x64

    c22fa37296b2c524f08a94ee8a8dbd34


    Code Sign

    Headers

    Imports

    Sections

  • 1/点击安装-中文语言包.exe
    .exe windows x64

    c22fa37296b2c524f08a94ee8a8dbd34


    Code Sign

    Headers

    Imports

    Sections

  • 1/点击此处安装电脑简体中文语言翻译包.exe
    .exe windows x86

    9d60329efc2c1e95059d603ccae50b52


    Headers

    Imports

    Sections

  • 1/点击此处安装语言包 (4).exe
    .exe windows x86

    8b60e6f04a4094c09e715ef6367b9f0e


    Code Sign

    Headers

    Imports

    Sections

  • 1/点击解除聊天限制.exe
    .exe windows x64

    c22fa37296b2c524f08a94ee8a8dbd34


    Code Sign

    Headers

    Imports

    Sections