General

  • Target

    MRPWPPKMOW.exe

  • Size

    6.1MB

  • MD5

    18a2cbdb9e89087bd594ae5a368293ee

  • SHA1

    d90a7844d2462887227c1ca16aa83dbb7f2462ef

  • SHA256

    9c116be6e64462c1cd94eb9c6dc62b82e7735695ea84d8cfdebaa537fbdeb5af

  • SHA512

    5b59853a10183e22794fdef5afe7d68b1d232bc0c2736707d09e0221e05e3d6a3ef8318d49617ea85c8230ea8a0bb6440d2b3fb9dd831b7867ae6536bb977d89

  • SSDEEP

    98304:Kp9mfVUegYLPO+7IeEKbyrzbUxMuyWMQFMhZ3hJXD1G6Q/q12RC1/J6KYM70EQOZ:KjSqegIPO+75E+yrzbqGWXcZRJRGuau

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • MRPWPPKMOW.exe
    .exe windows:6 windows x64 arch:x64

    3346e2dd454410a9e6dfc0adb5f75a16


    Headers

    Imports

    Exports

    Sections