General

  • Target

    $R0XDI0B.exe

  • Size

    10.2MB

  • MD5

    8dc3d50041fec9f2b5a088a024f8aad7

  • SHA1

    626f782029e436cc8dabdcdbcf546442da217b06

  • SHA256

    a75ee9934da7387d5d0f6fc5eaf930938c2aa258db9eefbddce1f11b40a60e69

  • SHA512

    cdebac2ada7ee127852121c75dd2a0537e55fbae0441fbc5496d486043d44c6276151f1373a4c323bd178217e195c4a1deb35fbf09c27b69bb7238d100884867

  • SSDEEP

    196608:WYkIedLxN2ZD8iBE32cFl0xDiJ9jLR3BqoldRukhQ1ySFQze6CnH9coJdK46JU:WYKz2ZD8ocFl0xDu9ZBqlrMze6YHts4

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • $R0XDI0B.exe
    .exe windows:6 windows x64 arch:x64

    Password: Password123x!x

    44187cbcd9d40bbf72dfc77a73d3a8a7


    Headers

    Imports

    Exports

    Sections