9a37151a69b0668f2c66a786ac4541dff1affa52609676c3c2f5fda460b84fb9

Sharing

Copy URL Twitter E-mail

General

Target

9a37151a69b0668f2c66a786ac4541dff1affa52609676c3c2f5fda460b84fb9
Size

1.7MB
MD5

3f280d36b0bf304fe0d237a6d50edc43
SHA1

47cb5689bb19ca26371ba21c1ba7e0063e6fb6fc
SHA256

9a37151a69b0668f2c66a786ac4541dff1affa52609676c3c2f5fda460b84fb9
SHA512

20f3970ada993e9575a69720f870e73ac42aa66482bf774e90b6e82469197589fcc99734d486fb383c88f5bfe1556e311aaaf85ffea7969afcc1cea33a1ec2f7
SSDEEP

24576:bpW+cENG5/wr3Zcf3JQPpH3lhY4lq16rWOaO1F3zRV9zetasQLmm:bpWlEAyr3acpXXlY6COa0F39V96jQ6

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Files

9a37151a69b0668f2c66a786ac4541dff1affa52609676c3c2f5fda460b84fb9
.exe windows x86

5a46b09e2a5fd208a4bc29add1b08e0a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rasapi32

RasHangUpA

winmm

midiStreamOpen

ws2_32

WSAAsyncSelect

kernel32

VirtualFree
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

DrawIconEx

gdi32

GetViewportOrgEx

winspool.drv

DocumentPropertiesA

advapi32

RegSetValueExA

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

VariantClear

comctl32

ImageList_Destroy

oledlg

ord8

wininet

InternetOpenA

comdlg32

GetOpenFileNameA

Sections

.text
Size: - Virtual size: 651KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 866KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a46b09e2a5fd208a4bc29add1b08e0a

Headers

File Characteristics

Imports

rasapi32

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

wininet

comdlg32

Sections

.text Size: - Virtual size: 651KB

.rdata Size: - Virtual size: 1.2MB

.data Size: - Virtual size: 249KB

.vmp0 Size: - Virtual size: 866KB

.vmp1 Size: 1.7MB - Virtual size: 1.7MB

.rsrc Size: 20KB - Virtual size: 17KB

.text
Size: - Virtual size: 651KB

.rdata
Size: - Virtual size: 1.2MB

.data
Size: - Virtual size: 249KB

.vmp0
Size: - Virtual size: 866KB

.vmp1
Size: 1.7MB - Virtual size: 1.7MB

.rsrc
Size: 20KB - Virtual size: 17KB