General

  • Target

    etvc.7z

  • Size

    845KB

  • MD5

    a141f52c4db63dbad7cd74bcdeb44e48

  • SHA1

    460811c69e3064e4084c1984ff82f83101321b2d

  • SHA256

    583d4fa37dec3b838b5edde09483bbc33cd3cc29862ec9c53ddb1b4c4ba66570

  • SHA512

    d3062344a3bc6ae770be5e5243037d408a82e44d121477527a4b0b3b20d19c6bca63f47daeedf211d1e881b0dfebeb716509deb101f8496940e3cd8c1346e50e

  • SSDEEP

    12288:eremow4TvJ3P5Si/81ryAwryZTFtWuFl7xw7lC+Y4z51UnwpuST/GNmYfI365:eruTvJ3P5SiUQA6wGurVw724ay7T/OA2

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • etvc.7z
    .7z
  • Jzg9QJ/2SLFlf.exe
    .exe windows x86

    a26ef61b8f62e78405c8b8c8f5013061


    Headers

    Imports

    Sections

  • Jzg9QJ/MFC30.dll
    .dll windows x86

    1ae05c41c34f23ffa63680799974736f


    Headers

    Imports

    Exports

    Sections

  • Jzg9QJ/info.txt
  • Jzg9QJ/out.gin
  • s.exe
    .exe windows x86

    2690ae4a939ac6b4e454fafb0a0e0f52


    Headers

    Imports

    Exports

    Sections