General

  • Target

    SecuriteInfo.com.Trojan.Win32.Sasfis.32568.23824.dll

  • Size

    2.0MB

  • MD5

    734abb4dfff198dff85aff9bbaa42afd

  • SHA1

    7e7b50bd82c6a4c40f94ddf8f75bad73f1f7409d

  • SHA256

    2bdcd1fcd5c216e2b4178a896e8e2fdd99cc828ff5be79124ebd43f3cd6e2f5a

  • SHA512

    15a2a561ecd7988887c075b7de3b9ed29549006c5be98af288f89818f74cd04379d28e0f7c3549725410753b1e0d85be1fc65d67db783ef4ff6dad9862ca74f2

  • SSDEEP

    24576:vJBQ3BdlcO8cP6s9LBV2Oc0tQnrifaMp5RmgRnAdQ508jdbXbUJd:A3qOxyW2t0+rINLmgRnA2508jxUJ

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SecuriteInfo.com.Trojan.Win32.Sasfis.32568.23824.dll
    .dll regsvr32 windows:4 windows x86

    34f52b7d977a05427cf03b9aafba9c8b


    Headers

    Imports

    Exports

    Sections