Behavioral task
behavioral1
Sample
23014535b135784fe9f4908b80b4302775e14dafd2780d79d94ef9880b8a7375.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
23014535b135784fe9f4908b80b4302775e14dafd2780d79d94ef9880b8a7375.exe
Resource
win10v2004-20220812-en
General
-
Target
23014535b135784fe9f4908b80b4302775e14dafd2780d79d94ef9880b8a7375
-
Size
3.6MB
-
MD5
d32cd9aa2ea0bfff658ba8cb113aedc1
-
SHA1
5856fea91cbdf36ea13855291e4e2ee9133114d4
-
SHA256
23014535b135784fe9f4908b80b4302775e14dafd2780d79d94ef9880b8a7375
-
SHA512
03fce7c448291c1d94384cd58636ca562528f4ceaa7794922247b716fb67f3ec467763911365a1a9c909a7b99091a613f8f201f1a0ddb5b4e4ec75761ed6c569
-
SSDEEP
98304:6FnWpXU1eq/Jn73XYWR13IwhMQJhwGbE3EMrS:6xYgeqhbXYWRFIwR7k
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
23014535b135784fe9f4908b80b4302775e14dafd2780d79d94ef9880b8a7375.exe windows x86
10248e514fe4f7b0ea1bffbedf460626
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiOutUnprepareHeader
ws2_32
recv
kernel32
lstrcmpA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetWindow
gdi32
EndPath
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
CLSIDFromString
oleaut32
LoadTypeLi
comctl32
ImageList_Destroy
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 196KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 861KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ