General

  • Target

    05d6dd3469c9f057aa85437efffad082

  • Size

    687KB

  • MD5

    05d6dd3469c9f057aa85437efffad082

  • SHA1

    3cf44921b2e156d7fa21bb70e1c7e408b5169c6a

  • SHA256

    42ace022eb81771fbf111bd6f0ddb29f910c2c24eecaf6880384b0667b2c28d3

  • SHA512

    8a44d3ee07662f9a5bd1c0a371c5644fc0d0b40f76fb6dfc49a35fc0acd3c29437c714cf73f70c79c2ad22af015917c28d9b34b9e66e54061e9db8aef0b03f2c

  • SSDEEP

    12288:WlQQqUmprk46dGbYbfqzBRtGBO3OcmQcb9Yed4ZUfk9vX0h5TOlLHxUe1GH:BUgr6dGbYbyzBRtGw3Ocm/vs9chZO9R

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 05d6dd3469c9f057aa85437efffad082
    .sys windows:5 windows x86 arch:x86

    c0e838d3b00ca8660abb852c8e56b8ab


    Headers

    Imports

    Sections