General

  • Target

    719f6a9c4d9d36f1631ceefd2d43da2f

  • Size

    602KB

  • MD5

    719f6a9c4d9d36f1631ceefd2d43da2f

  • SHA1

    9294f54f64d7c5d7208f5f9382b9c1d309b89c98

  • SHA256

    42e3b12880cbcecf93cc5d053ad7f9a3b41810abddda448309d240ef5eb93672

  • SHA512

    4438a772616c337803ddbfc4042a78ca0af0005dd423e2807bbf77e28a3fe09b3026de599e13429eead8337b00b35f7fe78b5ba66e8b46de5606f05cff3cef86

  • SSDEEP

    12288:FbEhhemuy4glUnQ2/Ca/jp9UEP0C43fU8gMAx0+QujmXxLHzV/ny:5EhhemuC8H6aL5B43fU8gMG0+QuShzhy

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 719f6a9c4d9d36f1631ceefd2d43da2f
    .rar
  • CSOM.dll
    .dll windows:4 windows x86 arch:x86

    928a5269eaa9e8db3fb73d16b19bd648


    Headers

    Imports

    Sections

  • csojqk.exe
    .exe windows:4 windows x86 arch:x86

    0f7aa556c8830d678af33a52e54630af


    Headers

    Imports

    Exports

    Sections