General

  • Target

    phoenix.exe

  • Size

    3.4MB

  • MD5

    ee3b4a848f0460221ed88d9591010e6c

  • SHA1

    c973d18483dfa596095df4f2bc23cd12cb3b20f2

  • SHA256

    0c22aafb185560146e62bc320c1141330295963b6ade1ad6afce2e67fef320d7

  • SHA512

    262cde52ff71ef7c0d7af0f625c4d0b6e6d883e7b6d495e1f5d4940ac0bdb181b7a77c23dc6a77d268635b5df20f780628cb8337160ed34b7b9a27442a7c53a8

  • SSDEEP

    49152:9Z80tvCyJp3qV1w9+7jLfMeCNlH3IlORAsbkKx8ni5RTrs4vJtnhvE1IzfGE:PvCmFtyL0eeyORAs18nYY49EO/

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • phoenix.exe
    .exe windows:6 windows x64 arch:x64

    a66cb7605b3eba875f00f397b17f9365


    Headers

    Imports

    Exports

    Sections