Behavioral task
behavioral1
Sample
3514ebc94c64e6faf1da7c91df9b4d7695bd7717eb34eabde4ee96157abcf4d7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3514ebc94c64e6faf1da7c91df9b4d7695bd7717eb34eabde4ee96157abcf4d7.exe
Resource
win10v2004-20220901-en
General
-
Target
3514ebc94c64e6faf1da7c91df9b4d7695bd7717eb34eabde4ee96157abcf4d7
-
Size
1.3MB
-
MD5
c308423474f15a521a02e8f8213ba459
-
SHA1
49c9735a32ce2c3e1e4c7a99e5110f94d0b1a3fd
-
SHA256
3514ebc94c64e6faf1da7c91df9b4d7695bd7717eb34eabde4ee96157abcf4d7
-
SHA512
14ab8fd0e4efc50b1e9b6b8bc9954c3cbeb6eaa37da11c433d73e7a9af162c3e6ec7429d3edf2235a6debac229a7c5c9e930a69c6f0c133646fe5da26b573d59
-
SSDEEP
24576:E7wnMrzYmRa8tH9Vo8QBTQ+WY590c0aRH8fFkj1vzDDST:E3YOtZE+YMaRcfi9O
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
3514ebc94c64e6faf1da7c91df9b4d7695bd7717eb34eabde4ee96157abcf4d7.exe windows x86
96625d6422e1ef705d6e925132bb73ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
winmm
waveOutOpen
ws2_32
recv
rasapi32
RasHangUpA
kernel32
InitializeCriticalSection
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetWindowTextA
gdi32
PatBlt
winspool.drv
DocumentPropertiesA
comdlg32
GetOpenFileNameA
advapi32
RegCreateKeyA
shell32
Shell_NotifyIconA
ole32
CoRegisterMessageFilter
oleaut32
RegisterTypeLi
comctl32
_TrackMouseEvent
oledlg
ord8
wininet
InternetConnectA
Sections
.text Size: - Virtual size: 562KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 833KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 379KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 845KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ