Behavioral task
behavioral1
Sample
33e276a954790ada0ce3e7afe26f98cf1dbf3a3c6ba3183ec54ba157485e3c29.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
33e276a954790ada0ce3e7afe26f98cf1dbf3a3c6ba3183ec54ba157485e3c29.exe
Resource
win10v2004-20220812-en
General
-
Target
33e276a954790ada0ce3e7afe26f98cf1dbf3a3c6ba3183ec54ba157485e3c29
-
Size
5.3MB
-
MD5
1e3038a015849df54e1717f19f067259
-
SHA1
b721aed47b4ea9a95ce7a03ec7e5334fe6a139cb
-
SHA256
33e276a954790ada0ce3e7afe26f98cf1dbf3a3c6ba3183ec54ba157485e3c29
-
SHA512
b2332664c21ab8f043b7de6a2fe50448cf81489d7918af7e8aaffd97a8c598057cd09e446075ff3dabc90839504c0ff49f7db9b8ec49de71011fca0cdf801899
-
SSDEEP
98304:qunWu4HhMNMQEg764hed9kGIuLJZM8NwYj3RzzAyRlP3K2OT2jreQz:5WnHGNxEg76cezkeLJj7lP3E7
Malware Config
Signatures
-
Processes:
resource yara_rule sample vmprotect
Files
-
33e276a954790ada0ce3e7afe26f98cf1dbf3a3c6ba3183ec54ba157485e3c29.exe windows x86
0d2794a9901f4bf551c511fc5dbfcad0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetMenuItemID
gdi32
BeginPath
winmm
midiOutReset
winspool.drv
DocumentPropertiesA
advapi32
RegQueryValueA
shell32
Shell_NotifyIconA
ole32
OleInitialize
oleaut32
UnRegisterTypeLi
comctl32
ord17
ws2_32
inet_ntoa
comdlg32
GetOpenFileNameA
Sections
.text Size: - Virtual size: 535KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 4.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 833KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ