General

  • Target

    SecuriteInfo.com.PUA.VMProtect.18481.5853.exe

  • Size

    6.2MB

  • MD5

    489ccb5d43455471137a798cf13d95e5

  • SHA1

    758ed32cc9fb5377e7adb234da1531155d22cd68

  • SHA256

    47a03616ded76ceec06c720b4d2dcfeed7bf2f0be8d3ac6bef519872f4530c69

  • SHA512

    411fc34ec07c2de5cda089dbfad2b3aabbb53793af56e2ad9179c4deb545cea2b437a07749f871a2655b6fa451b899cdf332c5518e426fc4fe1b733dfd94aed3

  • SSDEEP

    196608:UA5fIbze3liS4nHnmh3yGALTDUcKXc2rKry:U4uy1iS+GYfLTfKXG

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SecuriteInfo.com.PUA.VMProtect.18481.5853.exe
    .exe windows:6 windows x64 arch:x64

    5656dc75b59c6ab210aa51ec8369e49c


    Headers

    Imports

    Exports

    Sections