General

  • Target

    SecuriteInfo.com.PUA.VMProtect.332.20908.exe

  • Size

    6.2MB

  • MD5

    ae8b45f4999ae0d5f44ef24212f8ce59

  • SHA1

    fca64d593d17bfe60ccef31bc68237333c6617f2

  • SHA256

    53a3e42e873e4bbf9856661121c96360165c436d125a88c16fb900a4f1f6cefb

  • SHA512

    1816420b43659c1a75a08b3cc06aa02842d63b74352820efe56379b0fa2df96e23f069a4f93c7caf5243ce31eb80642e236ba056d57109374687a90ab6c793a8

  • SSDEEP

    98304:yLnaNePV+zzN4E3XZFld3uCTJR133hjW59ylq4Ohedsg/qBR6eW1EiO+pe:MaNa+1/XzH5VI9xm65W1

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • SecuriteInfo.com.PUA.VMProtect.332.20908.exe
    .exe windows:6 windows x64 arch:x64

    5656dc75b59c6ab210aa51ec8369e49c


    Headers

    Imports

    Exports

    Sections