General

  • Target

    ad659602c46fd6a28d3719a4f12b78d1.bin

  • Size

    701KB

  • MD5

    6794ccea1d043d3c8762c40c4b9aec8e

  • SHA1

    6bb0b4d1b76111652a58df4ab369ab2934afa0b3

  • SHA256

    25c6f6bcfa9715094d1676b1af29f437837d085095770c288fe57eea0928c774

  • SHA512

    c7206357bfc8fd55b9b547bdf50a787a7f6a7a8d61fab08ec24c8166f464d32bb6a8aa911570dede20f05f57de00da53e2d5f6392a93e17557444b63abe4d688

  • SSDEEP

    12288:tWb1D/4i7WIPrSxlsWmz0ivspzf9Uhn8pXdJwJfovvD8HQv7J/Sr5:sb1Dg2rSTZioM8psJfO6uZSr5

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ad659602c46fd6a28d3719a4f12b78d1.bin
    .zip

    Password: infected

  • 12a14541847da73db01b7adb3038c2e9665f12952e3b8eb84ebf70dd9b81618c.dll
    .dll windows:5 windows x86 arch:x86

    Password: infected

    457da43c2456cc11e2e2b678872050e3


    Headers

    Imports

    Exports

    Sections