Behavioral task
behavioral1
Sample
148385201c521f2c580f1bc002e51b7224f81773e717ea531fd5a9d801156935.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
148385201c521f2c580f1bc002e51b7224f81773e717ea531fd5a9d801156935.exe
Resource
win10v2004-20220901-en
General
-
Target
148385201c521f2c580f1bc002e51b7224f81773e717ea531fd5a9d801156935
-
Size
68KB
-
MD5
69ddc764e2e5bf44edbcd6e1e9222760
-
SHA1
06c7f103b42da3e42f07a5a5967c5f5aa6cf03c2
-
SHA256
148385201c521f2c580f1bc002e51b7224f81773e717ea531fd5a9d801156935
-
SHA512
de4b550a7451c4294c1c17489416b91edb4f3407fac29cd8fa4f2cc51826da35c560d1f883b407e4d40f306a8c3dcc1dd99c5d54414dde1228281357a0e5e47b
-
SSDEEP
1536:LOFy3liYx1QTmwVrjemxjHCfsw3kdZnjfvZpo7VUW/+:NE41/wVrjFx4ENfQV//+
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
148385201c521f2c580f1bc002e51b7224f81773e717ea531fd5a9d801156935.exe windows x86
e080d14cccb842fd17a24425baa8374b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
RtlInitAnsiString
IoAllocateMdl
MmProbeAndLockPages
MmMapLockedPagesSpecifyCache
MmUnlockPages
IoFreeMdl
ExAllocatePool
ExFreePool
NtQuerySystemInformation
hal
HalMakeBeep
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 284B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 640B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ