Detect-It-Easy VS flare-vm

If it was me, I'd first run something like DIE on it (I have a few such programs installed)- https://github.com/horsicq/Detect-It-Easy

You could try to run https://github.com/horsicq/Detect-It-Easy to maybe find out how it got packed... Would help narrow it down.

First to confirm suspicions we will download and launch Detect it easy and click THIS button and select your executable and it should say "MPRESS 2.19" right HERE, that's how you know it's an MPRESS packed executable

Follow the instructions here to setup a FLARE vm which will have all the tools you need for the labs in the book flare vm

FLARE VM: this is a boxstarter from Mandiant to add a bunch of tools to Windows for malware analysis

build it as a proxmox host and have a malware analysis VM (flare-vm for example - https://github.com/mandiant/flare-vm) you can then interact with it via Console or host another VM as an SSH jump box and ssh tunnel to port 3389 on the malware vm

FLARE VM: a Windows toolkit for malware analysis from Mandiant: https://github.com/mandiant/flare-vm

I usually run it in virtualbox without guest additions, get one of those free windows 10 isos from microsoft and install the mandiant flare vm on it ( https://github.com/mandiant/flare-vm ), after everything is installed i keep a snapshot of the windows machine with everything set up so i dont have to do it all again and once its done i set the network to internal and set set up inetsim on remnux as well if im going to do dynamic analysis so that i have an internet simulator that the malware can talk to.

I use https://any.run for quick stuff or just fire my FlareVM up.