General

  • Target

    GFSDK_Aftermath_Lib.x64 (1).dll

  • Size

    3.2MB

  • MD5

    254ff9b7f620832fa47351fc539b9c03

  • SHA1

    06e3bb79e0027193b072996736b735e05ad415e3

  • SHA256

    10180ab4e60d64c9baa8370b60852cef85aeec89524b98cf69df52d70120b69f

  • SHA512

    74475b91a4fc75b29cb09e7f30fca777cc1dd182b0b3ee7bab733c50de84bbb21ce6ca157d37136f3b23347cc6f4c33d05d27f424528fa0ee804e691d974984e

  • SSDEEP

    49152:bNv88Y3eqXTYkNMtF49OoSbSnqyC9jr9Pu+CJqfssxrJl7HXtlw2CXEzYNJdavMI:V34HXTYkWgkfbRl9HZlCJqfser1CM5Z

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • GFSDK_Aftermath_Lib.x64 (1).dll
    .dll windows:6 windows x64 arch:x64

    9c4f6bfb3faf29452394a9ba40f3624c


    Headers

    Imports

    Sections