General

  • Target

    00031-25033.cap

  • Size

    2.7MB

  • MD5

    3d332a0579642577cc3bc396bc76be62

  • SHA1

    70181a8a673b9dd5f3c63c063565f95de5d3fead

  • SHA256

    bf82331ec71f451561740c3aadf3d534752de7a1003e1dab625b6a2b962f056c

  • SHA512

    2a943a878e50ad2c21a6a10307369652db35c3585aa34b6b134dddaf9e3c0d520672edc50afa374febafff46505b595f38ba9fa4a4431177cd3165cb8e76fc44

  • SSDEEP

    49152:BXZx2h5LGWQEFyj1UytqsFRFA5ML54xp8Lb9cTSI9+d8iXiYqrrFw0XieAUuQJbP:BKW5UyzFR254JcmD1y4mVJJbP

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 00031-25033.cap
    .zip

    Password: India@2023@@

  • Device/HarddiskVolume2/Program Files/TallyPrime/capsules/00031-25033.cap
    .exe windows:6 windows x86 arch:x86

    Password: India@2023@@

    8fbdf34eac3f31cc409f546c243e0a5c


    Headers

    Imports

    Exports

    Sections

  • manifest.json