Static

static

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    MDE_File_Sample_6f0dd3f538a654950c8dfdf9e2a0b0b784a999f0.zip

  • Size

    3.3MB

  • MD5

    32c86ee4f69cadae57c78109775d47c0

  • SHA1

    88f4e9b8f90c8b4c6cf3478351a66f32fe264c77

  • SHA256

    12d58efd1fa6b19689b062a80ee5b8acfeb0c61fb73c369a934c1126e53b2043

  • SHA512

    a87f6fe9c64790630be9335bff99ed1494ebf89fc23e2c0a763e1815753b822e652d11b5e1afb2011dce7ba753ddbaa89642fcbca4d7d2903d1745ce78b5abc3

  • SSDEEP

    98304:hVCUAiqcwJcUFVOawSDtvlZyMMg2nIrTy8bS1x:XCmw97OtSDtlpMg28yeix

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MDE_File_Sample_6f0dd3f538a654950c8dfdf9e2a0b0b784a999f0.zip
    .zip

    Password: infected

  • INLAB CLIENTE.rar
    .exe windows:5 windows x86 arch:x86

    21983070ba3f7ad2b10d9f499ce137ff


    Headers

    Imports

    Sections