General

  • Target

    windowsProcess.exe

  • Size

    12.4MB

  • MD5

    97acba1c1518c7289d5cdc4d033ad4ef

  • SHA1

    f8356274fd205905b55ede41a46de635fcb6e102

  • SHA256

    32bbbf82d9a2e4bcae3723561843c5f5268ca1585d7939c441b20c5712038db9

  • SHA512

    7affff7761061660f98d71c52c27b00d14766551a8273b20d3d6f9b50e04237bb68f69ed50cd1365e0cd02699838da63ebc50e5cd95e80c310ef43e7a8c2ba90

  • SSDEEP

    196608:08MSPJAbjVvz+KFnq/8ea86RT7lBHQ+tItAJSXPK6gE/KDI7Mu9i3tofrzsnii+V:HDPJMjV3qi86RTXqx/vLBMuZr++

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • windowsProcess.exe
    .exe windows x64

    eefd665f21d9d66af956385016f730ab


    Headers

    Imports

    Exports

    Sections