General

  • Target

    499d13fc208546f11aca808ba0fbf365e9a4fa55285065254c2ae06e62352c90.zip

  • Size

    4.8MB

  • MD5

    32d217fdfb8cf51e6c062942e9e7f173

  • SHA1

    ffe9b31b359f46f13efec107ea8c8adfe9cf478b

  • SHA256

    11f1f6565c9b0b7f9c5395c808d7f7ce6a2450832fa9289d4a14525b90485b8e

  • SHA512

    fa1e29e3d53dc33faf818221fd2fe8be9de263ee453779fa1a645f9446ca3b2b0e2236e6e00da466648ea812a128789a24a9256fb420fc69664e8a9a495f5cba

  • SSDEEP

    98304:1E0koVx0uCDJeqHzaAcoZLjR1K8A1xP1mo5CzndGaApBIF5Zh2oBzCsRC:5VxqVaBot1K8A1B1mo5UdlRPgo1dY

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 499d13fc208546f11aca808ba0fbf365e9a4fa55285065254c2ae06e62352c90.zip
    .zip

    Password: infected

  • 499d13fc208546f11aca808ba0fbf365e9a4fa55285065254c2ae06e62352c90.exe
    .exe windows:5 windows x86 arch:x86

    5a25a4c2e726f14b403abd29c6e8b8a0


    Headers

    Imports

    Exports

    Sections