General

  • Target

    TZYWDTFNXU.exe

  • Size

    6.1MB

  • MD5

    71c35b604e5b45f7610d7f19519a1207

  • SHA1

    15ddf6490946c127da82875a155970a3ea662fa6

  • SHA256

    feb3d892e07f4bb891a08a9a5d5afb5b12aafeac3c1b13c239eb4fa1167c5020

  • SHA512

    c5aeee11c2a06a77316a66a0088d20224028219e53fa8feb1d3bb8d68585ab132550c699bcf2e91c974a3d73e436fa1c5b966a45bcbeb705d385c867f97664f5

  • SSDEEP

    196608:oHjWjvogmO65V6GGiYAM2DKpWzHuMsXny+2cyYZQIy:WjMv6b+pixM9YzHuTy+ZdKIy

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • TZYWDTFNXU.exe
    .exe windows:6 windows x64 arch:x64

    3346e2dd454410a9e6dfc0adb5f75a16


    Headers

    Imports

    Exports

    Sections