Behavioral task
behavioral1
Sample
80a7ffcdba6e66ffcc0eb37794106d6f16d2b3a7f7e24f634daa8aac44299d71.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
80a7ffcdba6e66ffcc0eb37794106d6f16d2b3a7f7e24f634daa8aac44299d71.exe
Resource
win10v2004-20221111-en
General
-
Target
80a7ffcdba6e66ffcc0eb37794106d6f16d2b3a7f7e24f634daa8aac44299d71
-
Size
2.2MB
-
MD5
ad20a8b9078e9b7d3bc9f34ca856b668
-
SHA1
a552d55edf59f01bbb70359a4a0c5f622f65de33
-
SHA256
80a7ffcdba6e66ffcc0eb37794106d6f16d2b3a7f7e24f634daa8aac44299d71
-
SHA512
22de913d1fd2959e9450873190f85627c9789deacef91eb4bb1ce9a9fec7d9179afb9335a8550dd9eca5aa6b714817d570169c4a1c9592114753fe3fd237dbe1
-
SSDEEP
49152:wX/E7UwNv4Xh5SxE8JGoeaoO1AcrNlhQTDelA1Dza+ppo0:n1R4LSxE8JBeaN1XHhQ2OBza+U
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
80a7ffcdba6e66ffcc0eb37794106d6f16d2b3a7f7e24f634daa8aac44299d71.exe windows x86
f0bd42a545762f40ebd8c10d76ed312b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasGetConnectStatusA
winmm
waveOutWrite
ws2_32
WSAAsyncSelect
kernel32
lstrcmpiA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
WinHelpA
gdi32
MoveToEx
winspool.drv
ClosePrinter
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ord17
wininet
InternetSetOptionA
comdlg32
GetOpenFileNameA
Sections
.text Size: - Virtual size: 454KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 557KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE