Overview

overview

7

Static

static

7

Device/Har...pe.exe

windows7-x64

7

Device/Har...pe.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    skpe.exe

  • Size

    5.3MB

  • MD5

    4b99bfd56e2bf997b98eb2f9db8237d6

  • SHA1

    2bc25d3b7cdbf87cec1b32a27f5e44d773dd9c59

  • SHA256

    e259b432b1289b92ed5738915f3a6ad7dadecff61f035ba4ab8e813ad481be1a

  • SHA512

    636e9869d443a83414d79c613d9ee04bb44acb445cc92ea3986676d95ef972d9a0ed070af276f2b3d8971739c3862a0b1bc21f8b304c10959069fc192962b26d

  • SSDEEP

    98304:RAa6aCMEnIBodtxCVq9WTFe3ETqzQ3FbKuN8cDQJWBYFPupa4dZ1GfJ:SntvIBexC2WTF7mkQq8/JWeFka4d3GfJ

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • skpe.exe
    .zip

    Password: Sentinel1!

  • Device/HarddiskVolume3/Users/RhineLab/Desktop/SMSapp/wuyovip/disk1/skpe/skpe.exe
    .exe windows:5 windows x86 arch:x86

    Password: Sentinel1!

    9f35cc034966c27b4c592aae396abb7e


    Headers

    Imports

    Sections

  • manifest.json