General

  • Target
    VMProtect.exe
  • Size 33.4MB
  • Sample260705-btf3lsby2r
  • SHA256 e57a095ba23f59ed0364693adf730c3be16d46fda1b0a0d24d43498afe1f2e51
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Insecure Codesign Algorithm 1 IoCs

    File was codesigned using an insecure algorithm.

File Explorer

  • VMProtect.exe
    .exe 33.4MB

VMProtect.exe

  • IMPHASH 06194f1e32d2d7e9839b5b324cb96f0a
  • SHA256 e57a095ba23f59ed0364693adf730c3be16d46fda1b0a0d24d43498afe1f2e51
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Insecure Codesign Algorithm

    File was codesigned using an insecure algorithm.

Digest
a6:89:18:a5:c0:ec:13:79:48:4c:50:f1:52:99:33:73:59:e4:23:ff
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
Minor OS version
2
Major OS version
5
Entry point
89229852
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths