General

  • Target

    SecuriteInfo.com.PUA.VMProtect.6026.10299.exe

  • Size

    6.2MB

  • MD5

    e8458bcefddb03e02008feac6e9255f6

  • SHA1

    2d43f94b08d18cf922797d8ffdbcb04c48a4c3a8

  • SHA256

    e0f6290a0856cfed90d31482a4723e9dd054b31107896d322bc41277d7c29822

  • SHA512

    b0b06b07bb4ff47b6bba650ce7580c038aebe2a035735eaf3fa1eeacc66bf1ebcc23e80044f2d2b9b8a080aaf5f9abf9cc04de7ff823ccb29dd06edd1767c1b0

  • SSDEEP

    196608:C2wfHWQmOWg5TNkAfNfi0Smgw8g+JULmO:C/HWQFHkA1fiY8h01

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SecuriteInfo.com.PUA.VMProtect.6026.10299.exe
    .exe windows:6 windows x64 arch:x64

    8d47b9bdb4f5f5f3d9f4571544a2a79b


    Headers

    Imports

    Exports

    Sections