Behavioral task
behavioral1
Sample
185acacb5730cb3ee1e8f0c13f04a2678fee41d1b18f36bf681ab6c4a5b998e8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
185acacb5730cb3ee1e8f0c13f04a2678fee41d1b18f36bf681ab6c4a5b998e8.exe
Resource
win10v2004-20220812-en
General
-
Target
185acacb5730cb3ee1e8f0c13f04a2678fee41d1b18f36bf681ab6c4a5b998e8
-
Size
65KB
-
MD5
0c5d21940aae272cf19c6d0294309280
-
SHA1
eb44ad55c1befb316e89d08c709026d9540a5c3f
-
SHA256
185acacb5730cb3ee1e8f0c13f04a2678fee41d1b18f36bf681ab6c4a5b998e8
-
SHA512
1e5ba44b74f835b104c2d8cb3be052669311f3e9ea53a5e9bd6eafbb8e68a9550c811dc5470d514b7200f245e03f84a8b939d461cf14241c552f6d0b1a785d7f
-
SSDEEP
1536:I2/CdnIJSwpzh7bM/mp6+1ZL2ODGCxMJ7BQoNSq4zIOFCzs7Cg8IZ:BAIJrzZpD1cOPxMvf4EyNjZ
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
185acacb5730cb3ee1e8f0c13f04a2678fee41d1b18f36bf681ab6c4a5b998e8.exe windows x86
621035f939a89d24a029ff9852d1c1ef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
MmGetSystemRoutineAddress
IoAllocateMdl
MmProbeAndLockPages
MmMapLockedPagesSpecifyCache
MmUnlockPages
IoFreeMdl
ExAllocatePool
ExFreePool
NtQuerySystemInformation
hal
HalMakeBeep
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 384B - Virtual size: 340B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 384B - Virtual size: 284B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 640B - Virtual size: 520B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ