General

  • Target

    matcha.VMPDump2.exe

  • Size

    14.4MB

  • MD5

    5aa1a6295148f5907352fb953fc32974

  • SHA1

    822b2552db01bee512cd8d790702c3cbc347e326

  • SHA256

    be2750acd7bf2354e044d389815a4c0bc919c58f97105b11ab8a8db98ca93720

  • SHA512

    46a89c381dff3ce6adc88a7bc80248ac935b3c4bd4d4ae743c19f61d89bb38dff9e71e274db1edc97e5cb819b22dfae2a70c1e29bf5db28c115722fd1e49740a

  • SSDEEP

    196608:5ygp0+URy+moy5x1VVa8/+8QouVKYBS1v/PlH0w3RcpAEtaxku2R/:5ygmD5WxuHzVSv/POwBmzcyu

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • matcha.VMPDump2.exe
    .exe windows:6 windows x64 arch:x64


    Headers

    Exports

    Sections