Resubmissions

27/10/2024, 18:03

241027-wnfj4sxqcm 7

27/10/2024, 18:00

241027-wljhzszgja 7

13/10/2024, 15:23

241013-ssxgmstbpc 7

13/10/2024, 15:22

241013-srwtqatbjh 7

General

  • Target

    Strimage.zip

  • Size

    580KB

  • MD5

    4766969f15e6d035712a7656224aff5d

  • SHA1

    0720e45264103c8d1de13b36d78213b6f94adddd

  • SHA256

    6dcb9308ee6db9e6cbacc0a8fa8bf2adfc4f9dd2c4e048a7b34b08b3893b5d8d

  • SHA512

    0f325c07e3d9f96fe30e71c8513de5b3e2e7ec38407680a011c7b62c85171911ecb1feed78a10d0488fc914e14fb6b62cf9b7e271bb5cad38d3744635aad36b2

  • SSDEEP

    12288:ulpqoINmKqPyRnD9HZ72PFlLQOaVL82NkRwWH97I5U6ACplVyEvPkW:uls5HqPyRn5QPFlLQNdNkCIz0vP

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 2 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • Strimage.zip
    .zip
  • !!!!!README.txt
  • Strimage.exe.safe
    .exe windows:4 windows x86 arch:x86

    63fadb4d799ed27dc51996a999c18807


    Headers

    Imports

    Exports

    Sections

  • Strimage_SRC/MSSCCPRJ.SCC
  • Strimage_SRC/STARFIELD.RES
  • Strimage_SRC/STARFIELD.vbp
  • Strimage_SRC/STARFIELD.vbw
  • Strimage_SRC/frmStarField.frm
    .vbs
  • Strimage_SRC/frmStarField.frx
  • Strimage_SRC/mm2.bas
    .vbs
  • Strimage_SRC/mm2.wav
  • delmm2.exe
    .exe windows:4 windows x86 arch:x86

    1e6252214cfb504a7efd7ade7b6237c8


    Headers

    Imports

    Exports

    Sections