Behavioral task
behavioral1
Sample
b69e4e11151ea47a60aba51e6165e390d8a860cf9b165b41ebd1bfdf0767cc5e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b69e4e11151ea47a60aba51e6165e390d8a860cf9b165b41ebd1bfdf0767cc5e.exe
Resource
win10v2004-20220812-en
General
-
Target
b69e4e11151ea47a60aba51e6165e390d8a860cf9b165b41ebd1bfdf0767cc5e
-
Size
1.8MB
-
MD5
1126247085ebea86c2ea7b1254e8d4b8
-
SHA1
3d9356a325653a8a39e51791dc5c8cb789223070
-
SHA256
b69e4e11151ea47a60aba51e6165e390d8a860cf9b165b41ebd1bfdf0767cc5e
-
SHA512
de265c3a3d081c8dd92f5ffa044ec6ec0f6eda13f60c2a873d4073d417abb4c375f79a0ff070c7b84961b5de873e602ecccd13c1350af0e3e9acc0d08ea249ae
-
SSDEEP
49152:s6bsAc5gMm4OLAPOlSSCG2p8KQZo+3Kub2q4Jy4v7l3bXgjsIhMYLMFsfV:yTKMALVkG2p8KQrFP4JZvZ3bXgwIh5sq
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
b69e4e11151ea47a60aba51e6165e390d8a860cf9b165b41ebd1bfdf0767cc5e.exe windows x86
672c8a85578e518f8a90ede0957f56d9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
kernel32
GetVersion
GetVersionExA
GetFileType
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
OffsetRect
gdi32
GetTextMetricsA
winmm
mixerGetNumDevs
winspool.drv
OpenPrinterA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
OleInitialize
oleaut32
SafeArrayUnaccessData
comctl32
ImageList_Destroy
oledlg
ord8
ws2_32
ioctlsocket
wininet
InternetSetOptionA
comdlg32
GetFileTitleA
Sections
.text Size: - Virtual size: 777KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 963KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 214KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 936KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ