General

  • Target

    db7a249874f5889ca7d8bcd97f3e6454.bin

  • Size

    10.8MB

  • MD5

    f4651929398d604d773f4f8c8353148e

  • SHA1

    9af72f65d6df4b8d635eb33027189283f3079f80

  • SHA256

    540979fcae4943bd1e5b6955ed90aded85c1397ac9d8adf968c47df9db27dc47

  • SHA512

    df01e45cb589d7078d98185537a117c2ea6b5b074b9e87f78bd866a69ad412333dd5de72780d0d0032f83a5449113b762d9c21f3e2534941622df0c47aa78a21

  • SSDEEP

    196608:nNBalk3tQa1351KrgO+WoXJWsyd3kWZsIpvngQBkN1tMlQqXMJCQLoEdYCS8XIaH:nNclIlL1X1Wy4sy3kWiIW5NbAtXMUYdJ

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • db7a249874f5889ca7d8bcd97f3e6454.bin
    .zip

    Password: infected

  • 440735ee865d661efeef4060d676239d02cf3e8d9f47a95f48358d7e19bc08a5.exe
    .exe windows:6 windows x64 arch:x64

    Password: infected

    d87b9f1c229e184b90102d5370120f5c


    Headers

    Imports

    Exports

    Sections