Behavioral task
behavioral1
Sample
353f2f7218c4d85d852b43cb61a1c535338bc8465cb0386d6d2f9af0d205b91d.exe
Resource
win7-20220812-en
General
-
Target
353f2f7218c4d85d852b43cb61a1c535338bc8465cb0386d6d2f9af0d205b91d
-
Size
2.1MB
-
MD5
bb248d4ee6a659e2bd6dcffe03444015
-
SHA1
1afc5c59bf70ebaa667ecb1207d7a4c6a35feb8b
-
SHA256
353f2f7218c4d85d852b43cb61a1c535338bc8465cb0386d6d2f9af0d205b91d
-
SHA512
c24d634e67de559c14db23d1b2a69a848641f8b834a48269397d81d1ca24ad8fa8e3949bc298ca19b41acf8c61e1f8ff6b8a06862b44b82f15f117ca7ddf3c7c
-
SSDEEP
49152:WpVw8v44qKNbNWVKaKagrLxEN0LDW8xyAQt/gB/:WpVw8wKVNWVKkaDW8xyXgB
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
353f2f7218c4d85d852b43cb61a1c535338bc8465cb0386d6d2f9af0d205b91d.exe windows x86
43c6a0235f5aae51542ccbb252fd138e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
winmm
waveOutUnprepareHeader
ws2_32
recv
rasapi32
RasDialA
kernel32
GetVersion
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
SetTimer
MessageBoxA
gdi32
PtVisible
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
DragQueryFileA
ole32
CLSIDFromProgID
oleaut32
SafeArrayAccessData
comctl32
ImageList_GetImageCount
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 823KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 327KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 188B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ