Behavioral task
behavioral1
Sample
62e940ae533ca851a21f9aec15d3ed91f0c3c75f0672c6940d27bc9d8e10e6fa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
62e940ae533ca851a21f9aec15d3ed91f0c3c75f0672c6940d27bc9d8e10e6fa.exe
Resource
win10v2004-20221111-en
General
-
Target
62e940ae533ca851a21f9aec15d3ed91f0c3c75f0672c6940d27bc9d8e10e6fa
-
Size
1.2MB
-
MD5
27444ab946fe0898266a77b8b5bb3cbd
-
SHA1
e7370f7133d851ad6ef91bdee3c6bfb61e148b21
-
SHA256
62e940ae533ca851a21f9aec15d3ed91f0c3c75f0672c6940d27bc9d8e10e6fa
-
SHA512
d704c516d992f7c298bde3ba1ea0193f5fa2d2aeddeceb97b077b2c6c852647a603ad00adeea8f1c8664878ece609af1dfb3c86eca9e77a0e2e720d5c958fa56
-
SSDEEP
24576:Ku9rZRiOhM/LTajILHgAhxLO+o/kyRZR7F4MmLzTp:Ku9rnha6ILHThxqxk6lA
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
62e940ae533ca851a21f9aec15d3ed91f0c3c75f0672c6940d27bc9d8e10e6fa.exe windows x86
0386a3894925e2279143a022c3ec1778
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamRestart
ws2_32
recvfrom
kernel32
GetProcessHeap
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetMessageTime
MessageBoxA
gdi32
GetTextMetricsA
msimg32
GradientFill
winspool.drv
DocumentPropertiesA
advapi32
RegSetValueExA
shell32
SHGetSpecialFolderPathA
ole32
OleRun
oleaut32
SafeArrayPutElement
comctl32
ord17
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 560KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 762KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE