General

  • Target

    00031-00068.cap

  • Size

    3.2MB

  • MD5

    b71d182debe6bae77e67b67ce681d050

  • SHA1

    5f83aea4ed2f559ba030ec2c6a205d0e80abc5fa

  • SHA256

    30133b693f2007a2edad6a2ed4548301c9eec79c952977a21f7e202f65765b18

  • SHA512

    fcd6d8de6b6b251e38f7a56cae88c9ee60bad33441458e017276850eb491b926039e9b60a664fe4925b5973ad2c9fcab153c201ef5520c7c4a9f672174daafaf

  • SSDEEP

    49152:7Mt82aWk9AizBpAgS3bbFXPHiMfGaUoc4MlOXdcOkMb4GkXBAG/kZmGFaUZ:7Mt8okR0LbFKCGbocxQXdcOTbjUH/PmX

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 00031-00068.cap
    .zip

    Password: S@ndb0x!2023@@

  • Device/HarddiskVolume5/Program Files/Tally.ERP9/capsules/00031-00068.cap
    .exe windows x86

    Password: S@ndb0x!2023@@

    e6a10b1097b1b1546a56ed1e5939d61c


    Headers

    Imports

    Exports

    Sections

  • manifest.json