General

  • Target
    VMProtect.exe
  • Size 31.6MB
  • Sample261020-v95kpas1b1
  • SHA256 138d140584e3d703c3592cc3cd15124b428daee75629e25710b65228103ff817
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Insecure Codesign Algorithm 1 IoCs

    File was codesigned using an insecure algorithm.

File Explorer

  • VMProtect.exe
    .exe 31.6MB

VMProtect.exe

  • IMPHASH c96cbfaa48f620ce16fd692d1cf01768
  • SHA256 138d140584e3d703c3592cc3cd15124b428daee75629e25710b65228103ff817
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Insecure Codesign Algorithm

    File was codesigned using an insecure algorithm.

Digest
39:94:84:c8:f4:de:da:6b:a0:b3:7a:17:52:af:b8:bc:70:a6:d6:d6
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
CN=Permyakov Ivan Yurievich IP,O=Permyakov Ivan Yurievich IP,L=Ekaterinburg,ST=Sverdlovskaya oblast,C=RU,1.2.840.113549.1.9.1=#0c10696e666f40766d70736f66742e636f6d
Minor OS version
2
Major OS version
5
Entry point
87219451
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths