General

  • Target

    pass1234_setup.7z

  • Size

    7.4MB

  • MD5

    11786f2176a86c420e8ed701afb50b17

  • SHA1

    9f95d284567646c3349a509991a1ee7d07970de0

  • SHA256

    ee7a922c08b1f138b913164d4a7f4169572c01a345401aae5a6a4de6fe4caf63

  • SHA512

    a9eece3ee1bd7cbbb2f251034ac5b755cf793597989f073330fd95813a1f840bf434b533a32e4ded428c5794f30642b6ab027f996eac23fbc28c28c78ae89523

  • SSDEEP

    196608:/yx5rvxZiaRONPJyWM6yvHiauiQlJ2vdf:KxJvxZbRONgeGHiviyc

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • pass1234_setup.7z
    .7z

    Password: 1234

  • Setup.exe
    .exe windows x64

    Password: 1234

    4a93d72ba09b8a4391a6d3ce1f273db5


    Headers

    Imports

    Sections

  • prm0009.dll
    .dll windows x64

    Password: 1234


    Headers

    Sections

  • prm0019.dll
    .dll windows x64

    Password: 1234


    Headers

    Sections