Behavioral task
behavioral1
Sample
02036f649f5f8126b69c2652586874d379ed97afd4b819d0f61910db56463df7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
02036f649f5f8126b69c2652586874d379ed97afd4b819d0f61910db56463df7.exe
Resource
win10v2004-20221111-en
General
-
Target
02036f649f5f8126b69c2652586874d379ed97afd4b819d0f61910db56463df7
-
Size
892KB
-
MD5
7788371dbe26799d3962bc601d197eb0
-
SHA1
d7ce85baeea1c8c50d1a8d1a4087b40c567d970f
-
SHA256
02036f649f5f8126b69c2652586874d379ed97afd4b819d0f61910db56463df7
-
SHA512
7c40e68f236d8d9aeab92ada6d7e282b67c87b358a27875215d2b240154466940fe0af5e2e78a651ea0a8c141ff59ef8a1cde46af66b13dac1ed44a4a2dd01dd
-
SSDEEP
24576:oeU75ImZg6BI/U+jD7J2QnUiuspl3HeuQl:NU75VZg6B9+jDkQnUip3e7
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
02036f649f5f8126b69c2652586874d379ed97afd4b819d0f61910db56463df7.exe windows x86
e664bee703979e3bbad51b381f7f1c9e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
DllFunctionCall
kernel32
RaiseException
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 303KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 877KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 872KB - Virtual size: 870KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ