SinaV2 Perm CRACKED By Xeno[.]exe

Resubmissions

02/08/2026, 11:03

260802-m51ryaha837

02/08/2026, 11:02

260802-m5dbms1fkc7

Sharing

Copy URL Twitter E-mail

General

Target
SinaV2 Perm CRACKED By Xeno.exe
Size 6.5MB
Sample260802-m51ryaha83
SHA256 7240ce4c3b869ff8720eaf607a2d5104842b497c49968c4575440a7a6d8d9ace
MD5 ab26ba4d210f0107e3380d65fdb418a0
SHA1 7419ca49a03462d6efa0b3771a1bfcc92d8c2f4a
SHA512 49eae569402fb1d816d9ab4b70f26afa029414bd47814b0388481ee36086f6c08a349cee78661a4dddaa09d5d80b7a103e6e52cd1690db7b276e22f98644183d
SSDEEP 196608:qxIPv4fOyzx9YUyVKBsUA2BDFmmZmasVTBu:KIP1yzFzCIEm4dN
TLSH
T1D86623FE62483718C45A85745C33EC09B2FA651E4AF9D66EB5DBB6C07B9F810D902F02
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SinaV2 Perm CRACKED By Xeno.exe

File Explorer

SinaV2 Perm CRACKED By Xeno.exe

.exe 6.5MB

SinaV2 Perm CRACKED By Xeno.exe

IMPHASH 6335ba97a72be2c99ef5347b25dddb70
SHA256 7240ce4c3b869ff8720eaf607a2d5104842b497c49968c4575440a7a6d8d9ace
MD5 ab26ba4d210f0107e3380d65fdb418a0
SHA1 7419ca49a03462d6efa0b3771a1bfcc92d8c2f4a
SHA512 49eae569402fb1d816d9ab4b70f26afa029414bd47814b0388481ee36086f6c08a349cee78661a4dddaa09d5d80b7a103e6e52cd1690db7b276e22f98644183d
SSDEEP 196608:qxIPv4fOyzx9YUyVKBsUA2BDFmmZmasVTBu:KIP1yzFzCIEm4dN
TLSH
T1D86623FE62483718C45A85745C33EC09B2FA651E4AF9D66EB5DBB6C07B9F810D902F02
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

VMProtect packed file

Detects executables packed with VMProtect commercial packer.

vmprotect
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10016505

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_43

D3DCompile

kernel32

SleepConditionVariableSRW FlsSetValue LocalAlloc LocalFree GetModuleFileNameW GetProcessAffinityMask SetProcessAffinityMask SetThreadAffinityMask Sleep ExitProcess FreeLibrary LoadLibraryA GetModuleHandleA GetProcAddress

user32

SetCursorPos GetProcessWindowStation GetProcessWindowStation GetUserObjectInformationW

advapi32

CopySid

shell32

ShellExecuteA

msvcp140

?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A

imm32

ImmGetContext

dwmapi

DwmExtendFrameIntoClientArea

d3dx11_43

D3DX11CreateShaderResourceViewFromMemory

crypt32

CertFreeCertificateContext

ws2_32

bind

shlwapi

PathFindFileNameW

psapi

GetModuleInformation

userenv

UnloadUserProfile

bcrypt

BCryptGenRandom

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_exception_copy

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-heap-l1-1-0

_callnewh

api-ms-win-crt-runtime-l1-1-0

exit

api-ms-win-crt-convert-l1-1-0

wcstombs

api-ms-win-crt-time-l1-1-0

_gmtime64

api-ms-win-crt-filesystem-l1-1-0

_lock_file

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

_fdopen

api-ms-win-crt-locale-l1-1-0

localeconv

wtsapi32

WTSSendMessageW

Name

.text

Size

Virtual Size

1.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

374KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

1003KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

60KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.vmp0

Size

Virtual Size

3.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.vmp1

Size

6.5MB

Virtual Size

6.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

200B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

469B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

SinaV2 Perm CRACKED By Xeno.exe

d3d11

d3dcompiler_43

kernel32

user32

advapi32

shell32

msvcp140

imm32

dwmapi

d3dx11_43

crypt32

ws2_32

shlwapi

psapi

userenv

bcrypt

vcruntime140_1

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

wtsapi32

generic