General

  • Target

    3cbca2b010526d9ceb5aa9558f7d6cb0

  • Size

    471KB

  • MD5

    3cbca2b010526d9ceb5aa9558f7d6cb0

  • SHA1

    7c397591870ff127f32d1faabe892cf9946b65c5

  • SHA256

    20b080dd1a22fd74a0da7b851ad8c3897bb60815cd749ab4e34a05f9b8d6920b

  • SHA512

    1778cd8b5337d2d442a6c473a3a6de5a6f8d8314c09aac2ef7233879637a6eddb132fac0aee3ced439212534554ecc06d743153fcc41b84e8bc0b527b0308a5b

  • SSDEEP

    12288:7T8ik16Q9XG6t1tTyXqxqQOW9sYq97rO06/E155DWEKllxp:7VfKXvtD8ouosYq97rb6c15vKllxp

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3cbca2b010526d9ceb5aa9558f7d6cb0
    .rar
  • TRE台服自慰改枪Bate0.4_vmp.exe
    .exe windows:4 windows x86 arch:x86

    74aba2d13d59f24f8911f80546c54e06


    Headers

    Imports

    Sections