Static task
static1
General
-
Target
cb52abdb36bedd775bf5e575f2aa4e2b54a858380f7e9066ffb732f516f33912
-
Size
3.7MB
-
MD5
a69f1e4a9923267a2bcbebfbe2f44afd
-
SHA1
e5ad4661bac6d7ce06a6fb455620390913385685
-
SHA256
cb52abdb36bedd775bf5e575f2aa4e2b54a858380f7e9066ffb732f516f33912
-
SHA512
81f0f3cec9118f8c43b3d36985149612e66b4065e327865a2ea3a2b3883f9da97d4dfd09cd717b54bc621c8a056ad11ce056eb2a543f8c30ae8dd5f43f80ceb8
-
SSDEEP
98304:79yn4Be7t9BGHpb4AcEOQFiExKOrYqor1mRGqDIiXbju5Dfr:7GC8tdAAWMxm7MiXG5Df
Malware Config
Signatures
-
Processes:
resource yara_rule sample vmprotect
Files
-
cb52abdb36bedd775bf5e575f2aa4e2b54a858380f7e9066ffb732f516f33912.exe windows x86
138ae396e4ba823300659b930fda9c5c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetProcessWindowStation
GetUserObjectInformationW
Sections
.text Size: - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 65KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ