General

  • Target

    1e72be9469e800d1d398419694e7bc7b023795f785a4defc5b86e354c1f3a3e8

  • Size

    13.5MB

  • MD5

    b6cc2231c2c7655e6ee034a364b76f62

  • SHA1

    c5a4415362e29d948bb55914d4d9a636a3dc0657

  • SHA256

    1e72be9469e800d1d398419694e7bc7b023795f785a4defc5b86e354c1f3a3e8

  • SHA512

    3b23e06172ca25e2d788a4a466f7af504dda68b501497ad08f0a6da01246dab1f64b32c9d2a96951202346809f8684e60bca6984c5f5025e94b7b3f172962668

  • SSDEEP

    393216:thCPjWmnQS4IttwmKJz/EoGQOwyR257mnk+C8:riWuJ4IrFKJ4oGFwHmPL

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1e72be9469e800d1d398419694e7bc7b023795f785a4defc5b86e354c1f3a3e8
    .zip
  • 新游堂一键宏董事版.exe
    .exe windows:5 windows x86 arch:x86

    bf84f2351361fed6e44981897422ef2b


    Headers

    Imports

    Sections