General

  • Target

    de_up.pIGRZHkB.exe.part

  • Size

    3.6MB

  • MD5

    3bd0ff09c7d5255299c63cd4a44093fc

  • SHA1

    4893a34895abe11d8d9ec02a754c043b9f2d9a85

  • SHA256

    dcc9dd048bcafac1f7b75ceb4096e58d3465888eb96e3e92a2afaa621538c1a5

  • SHA512

    2bdf7695e6a35642ff662dfe389a1242f7f344e258f16a36dfcc279da73b89c2dea9017dbb661b946a03bb72baaf283d21595c33047ce16f205516b6b491a700

  • SSDEEP

    49152:ow3urGRGjf+vQRb5gkIsZb/A98B6fJJal36SaZqI2hLeokN7TrM3GNyBs4UfCNrs:JwGR0FG56b5FR6Sm58kNPLy8fMcEN7KJ

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • de_up.pIGRZHkB.exe.part
    .gz
  • sample
    .exe windows x86

    d69a0f393fe53d001b84bb2db8204cd8


    Headers

    Imports

    Exports

    Sections