General

  • Target

    645604102c2eed6833df46d88c6ae2a512ca945cdd02ef3240ae0d546446e7e4

  • Size

    11.7MB

  • MD5

    956735685d6c3a2923de4aee167e46a2

  • SHA1

    5b34597bbc80ca3f3dff2764e6085c0a82eeda6f

  • SHA256

    645604102c2eed6833df46d88c6ae2a512ca945cdd02ef3240ae0d546446e7e4

  • SHA512

    86dd8167083fd284e8a78006785f438f15c01bfdf2383e2a28ea7bbefd38bfb4eea73bd1009c437c8c2b30e35040c82b35be814ad098ec9e5a66fce3b926e5d4

  • SSDEEP

    196608:F2V4dRHvHjArBjdMWoPUMp/GFqTt/jVwCsXeze3lV3X9dYmG+Gjc/g+RywGVYMeg:iIPHUrfMdHpH1jViXezglV3nsig3w8Nd

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • 645604102c2eed6833df46d88c6ae2a512ca945cdd02ef3240ae0d546446e7e4
    .zip
  • v8.dll
    .dll windows:5 windows x86 arch:x86

    f502f05617dc0d28a5c295044e1a656c


    Headers

    Imports

    Exports

    Sections

  • yyjson.dll
    .dll windows:5 windows x86 arch:x86

    90408e805bf1f49f0f992349b524e70d


    Headers

    Imports

    Exports

    Sections

  • 山海.mp3
  • 山海单开.exe
    .exe windows:4 windows x86 arch:x86

    31fd51d48bb222a92213d5b0f44e5410


    Headers

    Imports

    Sections