Static

static

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Ntware.sys

  • Size

    2.5MB

  • MD5

    b33470e6f036b3a08d48f54bc689f64b

  • SHA1

    578c1e0ddce85b3529cfd8fe57378e6b892ba4f0

  • SHA256

    3311dcce9844f5b3c7a671b341b3e1e129dc1d72c6f240d3f661d5ba724fea7f

  • SHA512

    71a3c5cfff9e56f26ff2250b17156795c99ada16908222bb6c136be3f9e756ffefcf9c1d1121bf9dad8c4debbc7dc12543939f148c7eb1df76768c7d1c8dbc6a

  • SSDEEP

    49152:ealfhCtdXcJV82rNoogrQc806Pb7niWbeCY3gqwYrhwbRgw5U0JkC9zcKfRS:rlfhCbUpNPzc800n/eOSwbRgSJPtR

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Ntware.sys
    .sys windows:10 windows x64 arch:x64

    3bf17df88af4d2fe330ec7e591dbed0b


    Headers

    Imports

    Sections