2024-09-20 16:00:24
f074f05734c833b6765a05ba23e98088
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .text | 0x00001000 | 0x000040d7 | 0x00000000 | 0.0 |
| .rdata | 0x00006000 | 0x0003c57e | 0x00000000 | 0.0 |
| .data | 0x00043000 | 0x00000d40 | 0x00000000 | 0.0 |
| .pdata | 0x00044000 | 0x00000564 | 0x00000000 | 0.0 |
| .aspr0 | 0x00045000 | 0x006f941f | 0x00000000 | 0.0 |
| .aspr1 | 0x0073f000 | 0x00000a20 | 0x00000c00 | 0.193528336219 |
| .aspr2 | 0x00740000 | 0x00bca494 | 0x00bca600 | 7.84812025634 |
| .reloc | 0x0130b000 | 0x0000010c | 0x00000200 | 2.54945243461 |
| .rsrc | 0x0130c000 | 0x000001d5 | 0x00000200 | 4.72749157975 |
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| RT_MANIFEST | 0x0130c058 | 0x0000017d | LANG_ENGLISH | SUBLANG_ENGLISH_US | XML 1.0 document, ASCII text, with CRLF line terminators |
| Ordinal | Address | Name |
|---|---|---|
| 1 | 0x1800026c0 | DllMain |
| Antivirus | Result |
|---|---|
| Bkav | W64.Aidetectmalware |
| Lionic | Trojan.Win32.Vmprotect.4!C |
| Elastic | Malicious (High Confidence) |
| ClamAV | None |
| CMC | None |
| CAT-QuickHeal | None |
| Skyhigh | Behaveslike.Win64.Generic.Wc |
| ALYac | None |
| Cylance | Unsafe |
| Zillya | None |
| Sangfor | None |
| CrowdStrike | Win/Malicious_Confidence_90% (D) |
| Alibaba | None |
| K7GW | Trojan ( 005a7c0f1 ) |
| K7AntiVirus | Trojan ( 005a7c0f1 ) |
| huorong | None |
| Baidu | None |
| VirIT | None |
| Paloalto | Generic.Ml |
| Symantec | Trojan.Gen.Mbt |
| tehtris | None |
| ESET-NOD32 | A Variant Of Win64/Packed.Vmprotect.Aa Suspicious |
| APEX | Malicious |
| Avast | Win64:Malwarex-Gen [Trj] |
| Cynet | Malicious (Score: 100) |
| Kaspersky | None |
| BitDefender | None |
| NANO-Antivirus | None |
| ViRobot | None |
| MicroWorld-eScan | None |
| Tencent | None |
| Sophos | Mal/Generic-S |
| F-Secure | None |
| DrWeb | None |
| VIPRE | None |
| TrendMicro | None |
| McAfeeD | Real Protect-Ls!B78a80052c26 |
| Trapmine | None |
| CTX | Dll.Trojan.Vmprotect |
| Emsisoft | None |
| Ikarus | Pua.Vmprotect |
| FireEye | Generic.Mg.B78a80052c26c584 |
| Jiangmin | None |
| Webroot | None |
| Varist | W64/Abapplication.Umpb-5977 |
| Avira | None |
| Fortinet | Possiblethreat.Pallas.H |
| Antiy-AVL | Grayware/Win32.Puwaders |
| Kingsoft | None |
| Gridinsoft | Trojan.Heur!.02212022 |
| Xcitium | None |
| Arcabit | None |
| SUPERAntiSpyware | None |
| ZoneAlarm | None |
| Microsoft | Hacktool:Win32/Crack!Mtb |
| Detected | |
| AhnLab-V3 | Malware/Win.Generic.R669253 |
| Acronis | None |
| McAfee | Artemis!B78a80052c26 |
| TACHYON | None |
| VBA32 | None |
| Malwarebytes | Malware.Ai.1443392206 |
| Panda | None |
| Zoner | None |
| TrendMicro-HouseCall | None |
| Rising | None |
| Yandex | None |
| SentinelOne | Static Ai - Suspicious Pe |
| MaxSecure | Trojan.Malware.300983.Susgen |
| GData | None |
| AVG | Win64:Malwarex-Gen [Trj] |
| DeepInstinct | Malicious |
| alibabacloud | None |
| IRMA | Signature |
|---|---|
| ESET Security (Windows) | a variant of Win64/Packed.VMProtect.AA suspicious application |
| Avast Core Security (Linux) | Win64:MalwareX-gen [Trj] |
| C4S ClamAV (Linux) | Clean |
| F-Secure Antivirus (Linux) | Clean |
| Windows Defender (Windows) | HackTool:Win32/Crack!MTB |
| McAfee CLI scanner (Linux) | Clean |
| Forticlient (Linux) | PossibleThreat.PALLAS.H |
| Bitdefender Antivirus (Linux) | Trojan.GenericKD.74826203 |
| G Data Antivirus (Windows) | Virus: Trojan.GenericKD.74826203 (Engine A) |
| Sophos Anti-Virus (Linux) | Mal/Generic-S |
| DrWeb Antivirus (Linux) | Clean |
| Trend Micro SProtect (Linux) | Clean |
| ClamAV (Linux) | Clean |
| eScan Antivirus (Linux) | Trojan.GenericKD.74826203(DB) |
| Kaspersky Standard (Windows) | Clean |
| Emsisoft Commandline Scanner (Windows) | Trojan.GenericKD.74826203 (B) |