General

  • Target
    2c1572cbd022ebb0ff06371704eedb0edbd3f5a1b607e5cb4ee32598063d15c6
  • Size 13.9MB
  • Sample231205-pkn9hsbd23
  • SHA256 2c1572cbd022ebb0ff06371704eedb0edbd3f5a1b607e5cb4ee32598063d15c6
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

File Explorer

  • 2c1572cbd022ebb0ff06371704eedb0edbd3f5a1b607e5cb4ee32598063d15c6
    .exe 13.9MB

2c1572cbd022ebb0ff06371704eedb0edbd3f5a1b607e5cb4ee32598063d15c6

  • IMPHASH 421444bf3f1839c9b8ad284d0372ba79
  • SHA256 2c1572cbd022ebb0ff06371704eedb0edbd3f5a1b607e5cb4ee32598063d15c6
  • MD5 SHA1 SHA512 SSDEEP
  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

PE Signature issue

Digest
8c:2f:d8:ce:be:0b:6b:26:c6:85:72:33:51:c7:d1:0f:33:ef:ff:12
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=Shenzhen Fortune Trend technology Co.\, Ltd,O=Shenzhen Fortune Trend technology Co.\, Ltd,L=Shenzhen,ST=guangdong province,C=CN
Minor OS version
1
Major OS version
5
Entry point
6154764
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths