General

  • Target
    VMProtect_Con.exe
  • Size 25.0MB
  • Sample260803-2fc2xayene
  • SHA256 6a79c810a105286151f49db07f2e9a7a5ba640ee7fb58ea7a829b6ddf0d5008b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10

Malware Config

Signatures

File Explorer

  • VMProtect_Con.exe
    .exe 25.0MB

VMProtect_Con.exe

  • IMPHASH caa3f8b592ed8873e835fbce7c82cf67
  • SHA256 6a79c810a105286151f49db07f2e9a7a5ba640ee7fb58ea7a829b6ddf0d5008b
  • MD5 SHA1 SHA512 SSDEEP TLSH
Digest
0b:37:36:49:f2:86:c0:30:36:11:b1:d9:f8:a9:2a:d0:d2:6a:81:96:82:f5:23:55:5d:cd:a9:83:b0:0d:bd:e5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=Majestic Games Limited,O=Majestic Games Limited,L=London,C=GB

PE Signature issue

Digest
N/A
Digest Algorithm
N/A
PE Digests Matches
Not matched
Trusted
Not trusted
Minor OS version
2
Major OS version
5
Entry point
54485619
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths