General
- Target Neverlose.exe
- Size 51.3MB
- Sample260806-lbc84ssvbz
- SHA256 0d7c4cc5f33b019c475de553b0c239c5b95b7936a987b14cdaf288327103dec3
Score
9/10
Malware Config
Targets
-
- Target Neverlose.exe
- Size 51.3MB
- SHA256 0d7c4cc5f33b019c475de553b0c239c5b95b7936a987b14cdaf288327103dec3
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Checks BIOS information in registry
BIOS information is often read in order to detect sandboxing environments.
-
Themida packer
Detects Themida, an advanced Windows software protection system.
-
Checks whether UAC is enabled
-
Suspicious use of NtSetInformationThreadHideFromDebugger