Resubmissions

28/08/2024, 22:14

240828-151zlaygma 7

General

  • Target

    matcha.rar

  • Size

    16.4MB

  • MD5

    b0fb07b661b05ef0d3ddb04975495d3f

  • SHA1

    4e1f0cab430987a36bfc5a4a8108965fb686c1a7

  • SHA256

    3785c43832f9c599977c7b7cd8f7145021d0379cd2fa23f165067e88d69cd5b2

  • SHA512

    ce004f9e31a4ceb94ebc7e3a3473f449061a132bcef702bf642ee0e31d071bc3da95dbb11ee2b965b0501cb1802070229b65d38f62602096c698844a1894cd97

  • SSDEEP

    393216:crIaWoLTzob604GqDScCDG6DEqvHlGxXttR8b86gk:S9LEr412DZEqNgXtj8b86gk

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 3 IoCs

    Checks for missing Authenticode signature.

Files

  • matcha.rar
    .rar
  • matcha/README.txt
  • matcha/imgui.ini
  • matcha/loader.exe
    .exe windows:6 windows x64 arch:x64

    343e5baa491e604bcc8e2530403cd703


    Headers

    Imports

    Exports

    Sections

  • matcha/mapper/mapper.exe
    .exe windows:6 windows x64 arch:x64

    0e5a3d4f824ca421289c1d3cdb52d592


    Headers

    Imports

    Sections

  • matcha/matcha.exe
    .exe windows:6 windows x64 arch:x64

    85297424f45be2a21aae83e040356959


    Headers

    Imports

    Exports

    Sections