Behavioral task
behavioral1
Sample
f5f972796b650f40cdd74ae27308eda452723e4914b6e5097112ff7976f346eb.exe
Resource
win7-20220812-en
General
-
Target
f5f972796b650f40cdd74ae27308eda452723e4914b6e5097112ff7976f346eb
-
Size
1.4MB
-
MD5
69bf828408e0fff552f092fa44b5868d
-
SHA1
185d8e4bbb280072faaad3c30e67e8976fac27cb
-
SHA256
f5f972796b650f40cdd74ae27308eda452723e4914b6e5097112ff7976f346eb
-
SHA512
383651260f199717dfb141de05beabf021e43792e610cc716b13ccbf896c246020b9846f01f1343b856b259e6b6bba24600422139b3d751f6423bf235f51967b
-
SSDEEP
24576:rVjFcjAO+1/LjplaP5uAXNE3JQEYwsB8PD4DGvKtUdk59aWO0Ti:rVukJL6P5u35Rdy/FO0T
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
f5f972796b650f40cdd74ae27308eda452723e4914b6e5097112ff7976f346eb.exe windows x86
e330a113ed33f9dd3fe3798b24c3b53d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
waveOutReset
ws2_32
WSAAsyncSelect
kernel32
GetVersionExA
GetVersion
CloseHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CreateWindowExA
gdi32
SetPolyFillMode
winspool.drv
OpenPrinterA
advapi32
RegSetValueExA
shell32
ShellExecuteA
ole32
OleUninitialize
oleaut32
LoadTypeLi
comctl32
ImageList_GetIcon
comdlg32
GetSaveFileNameA
Sections
.text Size: - Virtual size: 449KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 905KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ