General

  • Target

    d8c58b9b4e5e035ba9a2b265520cbc9d6d81af0dc9c342713320b79c2d0436fb

  • Size

    3.7MB

  • MD5

    0c41e697ebbc20ab0d1f6b6a8d944385

  • SHA1

    b27151424755e50d8d248e4b217c1915922cd9c9

  • SHA256

    d8c58b9b4e5e035ba9a2b265520cbc9d6d81af0dc9c342713320b79c2d0436fb

  • SHA512

    f1ca633cbaf4ae873be61af49ff12bc9698102cf89cd94c7b9102d0de7e1b225bc359b475d1eaf4c66833510995fee4081a8f992b0b1d5b777cdaad368242924

  • SSDEEP

    98304:NG8KSj0uPdL5o+EnwHvnAo5M9ta2DmmsOgTQN3H8MSSQvs:NTPj5PdLS+E+PjM9ta2Dmms43H2m

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d8c58b9b4e5e035ba9a2b265520cbc9d6d81af0dc9c342713320b79c2d0436fb
    .zip
  • 使用指南(win10-11).zip
    .zip
  • 使用指南(win10-11).txt
  • 家庭版增加管理策略(右键管理员运行).bat
  • 获取权限.reg
  • 情缘(11-27).exe
    .exe windows:5 windows x86 arch:x86

    728ca1d00dfa385ca10ff7804f8aab25


    Headers

    Imports

    Exports

    Sections