Behavioral task
behavioral1
Sample
d11916d8194d105975d621c61afb9926b7998461620314c85580a71f92315c3b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d11916d8194d105975d621c61afb9926b7998461620314c85580a71f92315c3b.exe
Resource
win10v2004-20220812-en
General
-
Target
d11916d8194d105975d621c61afb9926b7998461620314c85580a71f92315c3b
-
Size
85KB
-
MD5
a03c21cb504f94a3ffca7049170b99e3
-
SHA1
096a9e504d39793e41bae7c1ae7683f3d2f7a5bb
-
SHA256
d11916d8194d105975d621c61afb9926b7998461620314c85580a71f92315c3b
-
SHA512
940692a09c672eb7adf9472d3c236a1153508b8f4882c99e280cf2de52e5f6b4cd23fb438b349f766950739b4574a26a2beea5be0f50dd6d604718ebdd08b5c0
-
SSDEEP
1536:rTEAlsoO3tq0hiWtUhx4B3hMJQqfW8K+Xfuglu4EY6q1yRSMm+:rT1ROQ0hiJ63hYe8K8ugs4l62Ym
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
d11916d8194d105975d621c61afb9926b7998461620314c85580a71f92315c3b.exe windows x86
dc5da5d4fa6cbccc271b5c15743962b1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord1775
msvcrt
__set_app_type
kernel32
GlobalFree
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
Sections
111 Size: - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
bbbb19 Size: - Virtual size: 64B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ