General

  • Target

    bab63dd5f71fc0ac4a546c5254b30838

  • Size

    173KB

  • MD5

    bab63dd5f71fc0ac4a546c5254b30838

  • SHA1

    f731c7b2877194361318ac18b3dbedbe48cc24c9

  • SHA256

    8974243f0a0feefc22df00f35635bbe3d765439aa31331376e8456834e05139a

  • SHA512

    8bfe41e0c062e16e48db42c00368109ca6430997d7531c2e2df43ff752fb371f39b472abbd15259d89ccdd6a1bd88146bbd6cf50b5bd5314b43c5428ed998ec3

  • SSDEEP

    3072:tXR3XEKxoL+tq9N86NirZWRQ2p7Q/EAD4LJw/5XdqoJNNQnwVdRSOFrgrmw:pFXEGoLi88NZWRQ2pQ/EYZtdqYGnwVdW

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bab63dd5f71fc0ac4a546c5254b30838
    .sys windows:5 windows x86 arch:x86

    2815a26316831738d3675416954567f9


    Headers

    Imports

    Sections