Overview

overview

10

Static

static

10

1c50cf5553...ad.exe

windows7-x64

10

1c50cf5553...ad.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1c50cf55533b22f329fbfc61d8770ba3a54fd7c06db5d01827dc382de2d634ad

  • Size

    389KB

  • MD5

    848d168e59619032befadf42f5c154d4

  • SHA1

    9e0a31dd6aab4c42127dbf27bf2742eb18a1b8fc

  • SHA256

    1c50cf55533b22f329fbfc61d8770ba3a54fd7c06db5d01827dc382de2d634ad

  • SHA512

    b13b4231240b453874ab8eb30be858ec9d2d7fcf7d83a2abd38378b40d0aec82556362a5f4cac2111901d93de8e29c176c610c244759c4014a0b262e1caf0b0e

  • SSDEEP

    6144:JfXApUZ6OsNHDPTSfHrA9orwT5dTX/qIb5rERW+fdYpHDyLxBt25:J4pUZ6OgHDGkorc5dTxrVpmLxBt

Score
10/10
vmprotectxworm

Malware Config

Signatures

  • Detect Xworm Payload 1 IoCs
  • Xworm family
    xworm
  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1c50cf55533b22f329fbfc61d8770ba3a54fd7c06db5d01827dc382de2d634ad
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections