Behavioral task
behavioral1
Sample
1aac8d44c6807ad851a4ce75704fddc55d5b49dde817e16a5fa410ba7f105c92.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1aac8d44c6807ad851a4ce75704fddc55d5b49dde817e16a5fa410ba7f105c92.exe
Resource
win10v2004-20220812-en
General
-
Target
1aac8d44c6807ad851a4ce75704fddc55d5b49dde817e16a5fa410ba7f105c92
-
Size
1.3MB
-
MD5
13cfcadef8c9117ae525680e3bd98cf0
-
SHA1
48581e1316a0ff0261edccb5ae16eafc7cb27a0b
-
SHA256
1aac8d44c6807ad851a4ce75704fddc55d5b49dde817e16a5fa410ba7f105c92
-
SHA512
d4da4a85dc25779213957dd3689533b98a2a9256bac82f1e10376aea64cbcf12fa4b6b2589f5620219ed7802aa3d9ceef439bdbe8e409f9356f7e5ed66b50bb0
-
SSDEEP
24576:h/tNB1iAlFOEKWPXT8UqyZqhkeUaGqM9PySmIbq4irzCkLIrI19gLJz8fJB6RiF:hF1KEKYBqyZXFawByaq4LQkLdiMC
Malware Config
Signatures
-
Processes:
resource yara_rule sample vmprotect
Files
-
1aac8d44c6807ad851a4ce75704fddc55d5b49dde817e16a5fa410ba7f105c92.exe windows x86
f9133f688b608d3a2e89c4ca5aa180c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord3597
msvcrt
__p__commode
kernel32
CloseHandle
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetSystemMetrics
shell32
ShellExecuteA
Sections
.text Size: - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 592KB - Virtual size: 591KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 184KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 592KB - Virtual size: 591KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ