General

  • Target

    SecuriteInfo.com.FileRepMalware.1111.23697.exe

  • Size

    5.5MB

  • MD5

    d4d645cb0c89359d63a331158cb81eed

  • SHA1

    d05da1f86a6de7d2fcb6c6e87aa7390ced599b63

  • SHA256

    5817ef3fabfb94cb2458ef826416d99a14f9633239bd4959b3bf3a6ec4c20731

  • SHA512

    0e8a282f2efdd4e8c040612b34755956f870883b68576d7109c395b72f0cf57e9762431300c50d6f56e6d95449c9d1eb9a92e83ccdfae7fae3553e530f6a8b8d

  • SSDEEP

    98304:EjmuD6AUjbVoQqMXZlahyOYWpVh+2z8oXyK2FsLo+LCRoNi6:VAUvVzZl6Yqh+2FXx2azL

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SecuriteInfo.com.FileRepMalware.1111.23697.exe
    .exe windows:5 windows x86 arch:x86

    2418e2826196e89e8cb5f53b8796c1cf


    Headers

    Imports

    Exports

    Sections