���7�s��+�U�W�=���9�u�-�j���}i�1��� �#6prp�� :(+���|��4���Q��O�eK�u;��o����G�ѻ �j"��� ��O��y�� �q;Hm�=�k��&M��jIZd�x��4��5�?�:W�R�>�� �,ۡ��7D����!�|���8�V�?�� _�!�8�x�G J� Ř�C����)e� �R��;ZF?���o.�p@��&�� u�7�8�bl��*�kn"�= '�Rg1)�h�?�?x,�<a!���5��WL ik���6��)?r7&+���C�z�.܁̭0*�� �p�E�����b^h����o83��Zd9� �T���W��i��Z��/��7Kuԧ �ri3�*Վ����w"(� �Y����s����R|�m$G��JU��U@�Z�)o/Ѵӛ��yD����¹w��cA@'Nh��� y, �P���L.�q��ϚR�XA; ��L��XON�(�w�]uZs�{e�4t#���ZK�I�k�wr�v�� ��� ��pO�;WdT4 �v���,�$� ���6#n�:a���g� S:5����jh-Y4��[�qF�A�Ԇh��j����x�� �� ks��_d ����4����h�Y�a�o�'�8Wy:u���0P!��;-���a�v�6�;,��I����Ф7n����m�{�(.�0����o����X%�=��߾Ԅϖ�z�=��/KH�����D�ڒ�C)����[����Y���G{�>my!B[� ���ߣ$�5��7Ӷ�b��晾Ŋ;G÷t��O���k�N�f(�r涙��HIb0o��;{qk�p(q�ߘ��`��~�y�oJV��?���3 �TqT��T ����~w��ܫ�.�� �;> ������T� %p �� k{�pqH+9U���zK�����d�'�nr �>�őZT�]��l eS�Q�'�e��c�����:��=]�������Ő$yCNP$$1�NY'���w#��s{�� �] ��yn�;8}tpu��Bd��.�w Wxy`ߣ����U+\)��5B���ZMg(B��x�is�6� ㏳:�0L���$u�5m�qޡ�;�s�� �)3�SV�W^��n������lZ���ƾ�攉�|j�h����`x�+�\ҹ�����>QϞB ��q� ��q2Z��'x�HN��m�\ u�k�(�Kޮ����J3� [ ZRv����4Դ�jW I��ث͍D�$1ng�L��ɿ(�� E�B6 ���MpKR�8���e0���1�G���rE_O�F��c�)֞= .� �OE�h�b#8lɍ ߿w�t��fC��Q��!�7��o��^��!�cc�)��:%!�˸����A�!~�[aY�? ����b]���$櫒tQ�N�e���3�絶6"�S���PM��-e���_� U*��[D�n��O4ul��(9c|��3䉮0�/4��%��s$����.���\d��K�B>�/8K��`� ����^��������ylI/u�b���G܁n������Bת{c;Zʒ�Yn{~D<&��� xs���"�R�����m���*�l������ p�!(�dq2�� �L��@�9%�E�!�Pm4^�9�|= $�,㬀50�������g�3�d��:��J.��������ҙ+�-jW���sx� ~��7��A�rscu�"&z���� �!3m�iEôb�W��ð=�p�<7�.�\o�"T��)�{r�:"/W�#�qM �Ŷ*%oh�H�#��&�4tn �r�vtF� �a��_�yD����?.F��! ^_��LN�X�8� �drw ��E�'C�8�2��pR u �f��E� c��a )JEp=���z�P*��l����V`�����'�'H�t�>)�d�:��^�$N3��eO��8�L�k�w�l��D��/l?Y��&�;��N� �"=x�`_( 1R�4��ދ��ڤꆔ�Z�l���죨������)��yK���y��������J`�2����~9rޚG;��h��_nv�o�Bo�.?� *\�%�LU'��fY�[�61|r((�L��������q��f4��������F�ү�獘ȯ�����@2I��-��s��?-������kTZa�GN��t* ����yF�-� +}����Md�B�6������ =�zDp�V����5E�y��ܲ��"B��0�G` ��m��� HS*�%�@ �� ���[1�"HA�!-�v�hV9l� P��ʯ슡�k��$�p��_�A4dZs�/=;����`&�"�m�=b�$���β;j�H<p�����6no���(�iE����HR]��u�� }����~��L��� 9�Q��R���!�/��G� �m���b������ �e�"���q�ֿ(����D8`yl6 no4�=r\����fO6����$d�Q�����8* �����M]��� '4�3�F�ع��5���� ^E.�9�dt��&�=֩f��˧_z9 qt&� J���Yq �/0�Y�mcڸ3��2�����Y>(�&!M���4�{��x��*����%�[Ѳ�&�<�rhC`ZG���/�+f�_Ȍ�_��4{r�B� ��+� ���$�P���:�ᐳح��zEp�"�XƋ��~4(�rvB� b㱌;$�|IJ���O:�ѼƳP��Ì�'=o[�AL������d[��Bq� ��e�U�� ���"�VB!<4a��Tӝ�yn������>�Ǒ9� �νMxd)]0r��fZF�"B!��{R\E/ L��4��>"J��� 1��0��4��6�P���u�:�y��`Jj5RЖ�:�v�C��G��x*PD( ��`2lW�<,Mt��[S}m!�;���ȳ��'�j]�<) BrW"�:��p�t�4?UC�@�+0{JO�U�� ��ˮA�|ƴ�KwU�E���;��eDdl�])T�V��d��tI;?��D��(�2:%H*�^���_�\���т\���6�6~3�X\�ԋ��:^Fy-�!�«7bM����P3�R�~�Dٌ�Mv��C���owE����e�=/ 0�Z !O�x&x�_��d5XjH';��\h���.��L칯R� 70�gֿ߾��~�?
General
-
Target
Entropy.zip
-
Size
30.1MB
-
MD5
5301e147bf060c586fa5b7120f2304cc
-
SHA1
5fb8cab27b793de31f474762770f24b9198c7f16
-
SHA256
07f316504ee7e08986f7ff2f5d62eba024c5e9fd2b4bfc42afa150cc783e4191
-
SHA512
acabb2a59bb0f971e506c96f507da947fbdaaea90586ad86cb93c7c97020bf0923e36f7c1b2f6b7f864da3403ce094c0436e36cbfcab3624cb254519a9587065
-
SSDEEP
786432:Qafp2yG+CPwT1keTEbHPd9ylXhexwPm+ukSnO6tHRPM6haGj72:jcwKUEB+ReN+uhnPdM6hI
Score
7/10
Malware Config
Signatures
-
Themida packer 2 IoCs
Detects Themida, an advanced Windows software protection system.
-
VMProtect packed file 1 IoCs
Detects executables packed with VMProtect commercial packer.
-
Unsigned PE 6 IoCs
Checks for missing Authenticode signature.
Files
-
Entropy.zip
Password: dadadadadada
-
Entropy.rar
Password: dadadadadada
-
Entropy again.rar
Password: dadadadadada
-
Entropy a.rar
Password: dadadadadada
-
entropy (old) (dont run probably ratted)/Kangaroo Patcher.exe
Password: dadadadadada
Headers
Sections
-
entropy (old) (dont run probably ratted)/Kangaroo.dll
Password: dadadadadada
0ed98e71adbb3a2a783bfed0bb0fc2e8
Headers
Imports
Sections
-
entropy (old) (dont run probably ratted)/entropy.exe
Password: dadadadadada
fd0a9a9adcdf86a9c10b85410ddcf253
Headers
Imports
Exports
Sections
-
entropy (probably doesnt work anymore)/Entropy Patcher.exe
Password: dadadadadada
f7a4012d250c70305954f058295fdfd5
Headers
Imports
Sections
-
entropy (probably doesnt work anymore)/Entropy.dll
Password: dadadadadada
Headers
Sections
-
entropy (probably doesnt work anymore)/EntropyV3.exe
fd6430271f2f16986c253db21eeced18
Headers
Imports
Exports
Sections
-
entropy (probably doesnt work anymore)/READ ME.txt