27bbc04ee4469191f0d4c5b2f8a08ddfe7c315798655447695037dd82596ba4d

Analysis

max time kernel
31s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
25-11-2022 11:57

Target

27bbc04ee4469191f0d4c5b2f8a08ddfe7c315798655447695037dd82596ba4d.exe
Size

224KB
MD5

0dfd14effc6a6764e2c2147907719d1d
SHA1

784d582d7799229ee2de7e1b1c72a4096e9d2b0d
SHA256

27bbc04ee4469191f0d4c5b2f8a08ddfe7c315798655447695037dd82596ba4d
SHA512

6691deed6e36d6c6c8e3bf6122993a30e88dac4b7618ae655826d694d39b693a9776e8308361484482167c5d910acad1e1c98d7a36295b0d34041a7a28686ae1
SSDEEP

6144:8VzxSazpJkiu/im+yDTDjXOQvjEq6EyA4:8VzXp9Pyzrv8A4

Score

8^/10

vmprotect

VMProtect packed file 2 IoCs

Detects executables packed with VMProtect commercial packer.

Processes:

resource	yara_rule
behavioral1/memory/1004-54-0x0000000000400000-0x0000000000668000-memory.dmp	vmprotect
behavioral1/memory/1004-56-0x0000000000400000-0x0000000000668000-memory.dmp	vmprotect

C:\Users\Admin\AppData\Local\Temp\27bbc04ee4469191f0d4c5b2f8a08ddfe7c315798655447695037dd82596ba4d.exe
"C:\Users\Admin\AppData\Local\Temp\27bbc04ee4469191f0d4c5b2f8a08ddfe7c315798655447695037dd82596ba4d.exe"
1⤵
PID:1004

memory/1004-54-0x0000000000400000-0x0000000000668000-memory.dmp

Filesize
2.4MB

Download
memory/1004-55-0x0000000075211000-0x0000000075213000-memory.dmp

Filesize
8KB

Download
memory/1004-56-0x0000000000400000-0x0000000000668000-memory.dmp

Filesize
2.4MB

Download