Behavioral task
behavioral1
Sample
3a4772616ba4490c6ff6b63c27a0a2a5736a14bfdd8123de12547cfccfc7995d.exe
Resource
win7-20220812-en
General
-
Target
3a4772616ba4490c6ff6b63c27a0a2a5736a14bfdd8123de12547cfccfc7995d
-
Size
230KB
-
MD5
30660f8ded057e431b0b1c22de2e4de0
-
SHA1
66bcbd6c698690b8ab60112297d2e57962bedc3c
-
SHA256
3a4772616ba4490c6ff6b63c27a0a2a5736a14bfdd8123de12547cfccfc7995d
-
SHA512
85fc7d9a764cf538d3526c48421fcfe294bafa98ad1fdb32b6c97b6b344e624e070eec3eb838d2aa12cdffbfea1b0dbc88938252c7eaff2f2050cf44479e0ce0
-
SSDEEP
3072:8wX0/6M3M2d668Be1IUFNxgrovIwShzihhCCzMMmjQFUIuRt4zKr8dAL57LOkkbt:8plJd6feXNWrVHSM9kFSya7ylbt
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
3a4772616ba4490c6ff6b63c27a0a2a5736a14bfdd8123de12547cfccfc7995d.exe windows x86
ec5e27207cc8a88167a459b9bcfb428f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
wsprintfA
advapi32
OpenSCManagerA
shell32
ShellExecuteA
ws2_32
setsockopt
msvcrt
_strset
Sections
.text Size: - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewmhixq Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 210KB - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE