General

  • Target

    11wY50tpm.exe

  • Size

    5.5MB

  • MD5

    3b38690db145fd74d4d52bab2ac78074

  • SHA1

    8f93d77eeacbd1868942b4868e8303d63503c723

  • SHA256

    6ba760d9873a0a77cf08fedee79a22656ed88edef185bbfac3418c2992d2dab1

  • SHA512

    55c3f5e799a2cca8ed09f192dcfc61d21e529c426fbb4848a9dc90719f3710ef12f29375ca4b0eb2a846b0c83ee7f90671842ccfca3e96853e94de6e485673fd

  • SSDEEP

    98304:aUsCzX5IW9GHi1UNQ3tNBHiIC1w49rY+4z4qZcfNl2o1l1HiO9Yz6Jy3XR:Rsp2GH+UNQTBQ1Hs4q0YozBimYmsh

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 11wY50tpm.exe
    .exe windows:6 windows x64 arch:x64

    18564b1cf3df285f6aada8e4727159f9


    Headers

    Imports

    Exports

    Sections