Overview

overview

10

Static

static

7

ailway.exe_JC.exe

windows7-x64

10

ailway.exe_JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ailway.exe_JC.vir

  • Size

    6.8MB

  • MD5

    bc5a19d0681040b41f0dfdc1ad0c80ba

  • SHA1

    49fae1bc6abfb95c3b60deb8a94bc5df06fafdfe

  • SHA256

    68aa971c12bf6a688b099274bb9ef128db3f8c8b2f9b0f6db202ae47584b2c5d

  • SHA512

    17ca3378988d0b6db86b496e7536fabbedbecee48c25b58cdb6d31497e501420848c7fa030c1f6e97b8a7036f1fd911a870a4480ee190ccca5cb660e3c0535e2

  • SSDEEP

    196608:pagZio2lvPYHit3YoAqDGUvUnCqtpFzit2WFCijtIbK:ExxPI0NSp7t/VWIiW

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ailway.exe_JC.vir
    .exe windows x86

    6f1afb521158f9e8201d86952c5e32ca


    Headers

    Imports

    Sections