db9f698360d7ca795075fbbaf62b60dea53cb060d6b7640c8dfc268b18bf8af3

Sharing

Copy URL Twitter E-mail

General

Target

db9f698360d7ca795075fbbaf62b60dea53cb060d6b7640c8dfc268b18bf8af3
Size

4.1MB
MD5

4707f303bf7416fdb58e2ae62e64714c
SHA1

1645325a57bd9a4b92aceae98661dc2a6d9d9293
SHA256

db9f698360d7ca795075fbbaf62b60dea53cb060d6b7640c8dfc268b18bf8af3
SHA512

76f65af2918685ccdbb2f7bbb83c0f9ab3abfbc927a94b2a52ebac9fd54de54cec5b95bc4294d89b2756c7c05f9263a0c077d4b302bd0b1e4f3616cfcbd92ce4
SSDEEP

98304:tJkE1sb/ywRW3p5O1OJa3BVuFsCxlejnlXOXiw3oDl3Yqw:THWR8/UOaMlxgDNOOF

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Files

db9f698360d7ca795075fbbaf62b60dea53cb060d6b7640c8dfc268b18bf8af3
.exe windows x86

3273793e8e78022fdcde5bd80d3e1809

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamRestart

ws2_32

ioctlsocket

kernel32

GlobalFindAtomA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

SetScrollRange
MessageBoxA

gdi32

RestoreDC

winspool.drv

DocumentPropertiesA

advapi32

RegCloseKey

shell32

DragQueryFileA

ole32

OleInitialize

oleaut32

LoadTypeLi

comctl32

ImageList_Destroy

wldap32

ord29

comdlg32

ChooseColorA

Sections

.text
Size: 648KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.vmp1
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3273793e8e78022fdcde5bd80d3e1809

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wldap32

comdlg32

Sections

.text Size: 648KB - Virtual size: 644KB

.rdata Size: 3.0MB - Virtual size: 3.0MB

.data Size: 60KB - Virtual size: 172KB

.rsrc Size: 24KB - Virtual size: 21KB

.vmp0 Size: 284KB - Virtual size: 283KB

.vmp1 Size: 104KB - Virtual size: 100KB

.text
Size: 648KB - Virtual size: 644KB

.rdata
Size: 3.0MB - Virtual size: 3.0MB

.data
Size: 60KB - Virtual size: 172KB

.rsrc
Size: 24KB - Virtual size: 21KB

.vmp0
Size: 284KB - Virtual size: 283KB

.vmp1
Size: 104KB - Virtual size: 100KB