General

  • Target

    b665a9f336116a0724a42f95de0d4cae

  • Size

    6.1MB

  • MD5

    b665a9f336116a0724a42f95de0d4cae

  • SHA1

    cc17c9b0fe6bbb1b8d2cfa4305118ff4741550d0

  • SHA256

    ac073e614ab5e889f1949c1bcbad4280952047e8d6524e46ca0b20fa958d5c38

  • SHA512

    4000221411ee5c9d06d1e410f3f65448745fcd25e05171eb0dc1cf6fc2b084467d122cca033c61736d9286e6e88163d5ce57340c46a24e07b6ea839921648b8f

  • SSDEEP

    196608:V9xm+M34JM5I3Zi1pVNjOrocwBeCM0tG2olivcqhC:XJMWpi/Vp3cwACJtG2olivo

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b665a9f336116a0724a42f95de0d4cae
    .zip
  • EULA.docx
    .docx office2007
  • Fly.down
    .dll windows:6 windows x64 arch:x64

    fd4172d3706d4263175b73f80bd909a0


    Headers

    Imports

    Exports

    Sections

  • FlyDown/FlydownTheme.ytd
  • Read Me !