General

  • Target
    7b230a6a7b9309f9dbf8ec1f27a1818447ff60ced1e1e12c1990d041dd0e4e1d
  • Size 14.9MB
  • Sample260928-ml65lsac49
  • SHA256 7b230a6a7b9309f9dbf8ec1f27a1818447ff60ced1e1e12c1990d041dd0e4e1d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

File Explorer

  • 7b230a6a7b9309f9dbf8ec1f27a1818447ff60ced1e1e12c1990d041dd0e4e1d
    .exe 14.9MB

7b230a6a7b9309f9dbf8ec1f27a1818447ff60ced1e1e12c1990d041dd0e4e1d

  • IMPHASH baf96f867bd430884c0d721b55eabccc
  • SHA256 7b230a6a7b9309f9dbf8ec1f27a1818447ff60ced1e1e12c1990d041dd0e4e1d
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • VMProtect packed file

    Detects executables packed with VMProtect commercial packer.

Digest
ba:d8:04:c2:27:40:9e:d5:37:2c:1c:b7:9e:26:bb:9b:2e:cd:6e:f1:a0:81:3e:6a:c2:6f:28:3f:c1:d3:b7:52
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91110000700049024C,CN=广联达科技股份有限公司,O=广联达科技股份有限公司,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Digest
dc:13:e8:06:7f:62:29:f3:e7:e5:47:20:a6:b0:c9:b2:97:be:2a:6d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=91110000700049024C,CN=广联达科技股份有限公司,O=广联达科技股份有限公司,ST=Beijing,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#13104861696469616e204469737472696374,1.3.6.1.4.1.311.60.2.1.2=#13074265696a696e67,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
0
Major OS version
6
Entry point
13003932
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths