General

  • Target

    partitionwizard.dll

  • Size

    4.8MB

  • MD5

    1d82d1a5c6e6f5bb7e6f4d2c745493ea

  • SHA1

    4cbdadf7a3fed541c9fbeafec185dc6d11e0263c

  • SHA256

    dcb65aa777ca0ca04e81e67f53064e720c83b7b7e726ffe9dea52372547c6fcd

  • SHA512

    004ae5e14b2a31335e3521e67afb0936b4ae14545b1ca1b62bc763e988551015c4e64d47aebbddebe363bc7017cb2ce17318283d6da7cdc98807dd158cc0e6ba

  • SSDEEP

    98304:1v4a8N9qo9nnSXYjG5+chFy5dmNjQ5W5yQ5AiHgJMcjflI+vl7v7:1BuFnSXYjJchI5gNQ0r+JFjfllr7

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • partitionwizard.dll
    .dll windows x64

    37d1c8d305d3fcc82129c95a13e696f7


    Headers

    Imports

    Exports

    Sections