Behavioral task
behavioral1
Sample
f3251922f608dcf6edd0995f54eef13d3142d657d961bdb523eb9013eb46b6a9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f3251922f608dcf6edd0995f54eef13d3142d657d961bdb523eb9013eb46b6a9.exe
Resource
win10v2004-20220812-en
General
-
Target
f3251922f608dcf6edd0995f54eef13d3142d657d961bdb523eb9013eb46b6a9
-
Size
866KB
-
MD5
74b0db9fe5c1790ae96262b4a71fa780
-
SHA1
40d06ccb36f15bd021071b71261c20b9263e2cfd
-
SHA256
f3251922f608dcf6edd0995f54eef13d3142d657d961bdb523eb9013eb46b6a9
-
SHA512
dfdb4cfd6bf45482e85d57d3e2e856e8a9a987ec06837c2cf86237ec2a7200484a28f6a6979bc4062ccb14a89712616e5b78b30d728dee4cd97d8d386f768b54
-
SSDEEP
24576:hFhYsORYu+2VP2nJIFS/U71VK+m3NqcfXB:msORYr2VPlSMLK+Gfx
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
f3251922f608dcf6edd0995f54eef13d3142d657d961bdb523eb9013eb46b6a9.exe windows x86
e45ecd7122e48b274f9c4ac38d3e9331
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
uniansi
GetModuleFileNameW
kernel32
CreateFileA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
ole32
CoCreateInstance
oleaut32
SysAllocString
comctl32
InitCommonControlsEx
msvcrt
_XcptFilter
advapi32
RegCloseKey
gdi32
DeleteObject
user32
ShowWindow
Sections
.text Size: - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rol Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: - Virtual size: 624KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 689KB - Virtual size: 689KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ