Overview

overview

7

Static

static

7

100%刷钻...mp.exe

windows7-x64

7

100%刷钻...mp.exe

windows10-2004-x64

7

穿越火�...��.exe

windows7-x64

1

穿越火�...��.exe

windows10-2004-x64

1

视频教程.exe

windows7-x64

7

视频教程.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    08134a9f28c96bfabab151b1cdef734a

  • Size

    2.8MB

  • MD5

    08134a9f28c96bfabab151b1cdef734a

  • SHA1

    b7669b788f0b20b3a1411b58407f748d2f72d7f3

  • SHA256

    9e8855c533254ecd0d0fb463380155da7049d6b68f9808bbe3db2b9e49beb5bb

  • SHA512

    ebb3b704b952a60bbe9949cd30fa97b7f7a9c1ac1f1888550608d538b5868931e1f80bb0d2cb51b2df3e27a77d297586769537e1f0267ffa79e30fce600fe9f0

  • SSDEEP

    49152:/yx6qH5zsRwMpkujf9x2utxn3LraUMluQoEyRsZi54f3LkBSiy8hc6isDSsvkRy9:/y6GzsRwMpjL94u7/kluQoEyGZi5m3La

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 08134a9f28c96bfabab151b1cdef734a
    .7z
  • 100%刷钻刷Q币.vmp.exe
    .exe windows:4 windows x86 arch:x86

    f429463fd9a5a35c264ed162bb0fd57d


    Headers

    Imports

    Sections

  • 穿越火线刷枪稳定版.exe
    .exe windows:4 windows x86 arch:x86

    917c9e990262e5b2b734873583168271


    Headers

    Imports

    Sections

  • 视频教程.exe
    .exe windows:4 windows x86 arch:x86

    c94ecc80ac216c3ab3b624bdb1d24cea


    Headers

    Imports

    Sections