Overview

overview

7

Static

static

7

OMSI.The.B...en.exe

windows7-x64

7

OMSI.The.B...en.exe

windows10-2004-x64

7

OMSI.The.B...��.url

windows7-x64

1

OMSI.The.B...��.url

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    0c089dc5a13ef10291cfd251fe438bd6_JaffaCakes118

  • Size

    61KB

  • MD5

    0c089dc5a13ef10291cfd251fe438bd6

  • SHA1

    fc44efa386aefc7e59746faa9cd41972b6fe6334

  • SHA256

    2f9619471b3b83edc83654568b7a7fb20b0c0dcb69082d017dcefd66bf0d7109

  • SHA512

    4f7ca862066ab84f1d9cac5daed34a403b3b30d7dc36ed610b49cd5a51d12d77e7dcda4d5678665ec8f941f763c037459646f956f8ca7d9e11cf3bf288360ff1

  • SSDEEP

    1536:Q/0B56FXEhlCKko1e9PSRzevvzDmOsNSNNvp66d0jX8:3B56RGkTCzKzNUkvp6Z8

Score
7/10
vmprotect

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

    vmprotect
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0c089dc5a13ef10291cfd251fe438bd6_JaffaCakes118
    .rar
  • OMSI.The.Bus.Simulator.v1.01.Crack-RELOADED/ALI213.txt
  • OMSI.The.Bus.Simulator.v1.01.Crack-RELOADED/Keygen.exe
    .exe windows:1 windows x86 arch:x86

    45f177457243492c87ee53c58a045e9b


    Headers

    Imports

    Sections

  • OMSI.The.Bus.Simulator.v1.01.Crack-RELOADED/reloaded.nfo
  • OMSI.The.Bus.Simulator.v1.01.Crack-RELOADED/游侠网专题导航-游侠网中国单机游戏门户.url
    .url