3014defd7686f63d78f0c34851b3e0d203c0f94c7e3fa4544eeb68bbec5de153

Sharing

Copy URL Twitter E-mail

General

Target

3014defd7686f63d78f0c34851b3e0d203c0f94c7e3fa4544eeb68bbec5de153
Size

1.9MB
MD5

72bc386efb5340a503c61d86339ad6bf
SHA1

bca35becdf6d3ee07e9b73b2a7679f59d9ecc82c
SHA256

3014defd7686f63d78f0c34851b3e0d203c0f94c7e3fa4544eeb68bbec5de153
SHA512

e18e614e4ff9b1a6f19f02999e8eb68f1f6ec5e98f7195e0d45628b51b8545a2da77ffda56cb3a0de60006e5b0931c508bf3181b6a657cb70765a6ca72ef3d5f
SSDEEP

49152:iQ7zzHq1SNHXJxMZANXyMemjgZAr/Ru8cGc2TR2cingGXmxI:n7HHQkMZ4eOgZu/RurG9Tkcu7Xmx

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Files

3014defd7686f63d78f0c34851b3e0d203c0f94c7e3fa4544eeb68bbec5de153
.exe windows x86

15f3829f9bffd6a6d446f6e61e8aa7e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutOpen

ws2_32

recvfrom

kernel32

GetStartupInfoA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

SetForegroundWindow

gdi32

PtVisible

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

OleUninitialize

oleaut32

SysAllocStringLen

comctl32

ord17

oledlg

ord8

comdlg32

GetOpenFileNameA

Sections

.text
Size: - Virtual size: 523KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15f3829f9bffd6a6d446f6e61e8aa7e3

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

comdlg32

Sections

.text Size: - Virtual size: 523KB

.rdata Size: - Virtual size: 303KB

.data Size: - Virtual size: 216KB

.vmp0 Size: - Virtual size: 1.4MB

.vmp1 Size: 1.9MB - Virtual size: 1.9MB

.rsrc Size: 12KB - Virtual size: 8KB

.text
Size: - Virtual size: 523KB

.rdata
Size: - Virtual size: 303KB

.data
Size: - Virtual size: 216KB

.vmp0
Size: - Virtual size: 1.4MB

.vmp1
Size: 1.9MB - Virtual size: 1.9MB

.rsrc
Size: 12KB - Virtual size: 8KB