General

  • Target
    06ca44616c02efe639c84a626cc45af134fc794e74efc35771e309df893d87fc
  • Size 4.1MB
  • Sample260804-a3tjmaac38
  • SHA256 06ca44616c02efe639c84a626cc45af134fc794e74efc35771e309df893d87fc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 06ca44616c02efe639c84a626cc45af134fc794e74efc35771e309df893d87fc
    .exe 4.1MB

06ca44616c02efe639c84a626cc45af134fc794e74efc35771e309df893d87fc

  • IMPHASH f9209b89b1a9586cbfb76092092d1f9c
  • SHA256 06ca44616c02efe639c84a626cc45af134fc794e74efc35771e309df893d87fc
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
1
Major OS version
5
Entry point
5887144
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths