Behavioral task
behavioral1
Sample
c5a48bb64dd734fba227d32db705ad1530e3e89ca4e540ce572266184f8709d3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c5a48bb64dd734fba227d32db705ad1530e3e89ca4e540ce572266184f8709d3.exe
Resource
win10v2004-20221111-en
General
-
Target
c5a48bb64dd734fba227d32db705ad1530e3e89ca4e540ce572266184f8709d3
-
Size
18KB
-
MD5
9bfbb0cb8883db3a2bf73f0ea5354b2c
-
SHA1
36b637770c3b83ff85a667f870934ca323623ce9
-
SHA256
c5a48bb64dd734fba227d32db705ad1530e3e89ca4e540ce572266184f8709d3
-
SHA512
09fba4b8d5f84793bc5da6d65e14e57446c30caf6e395bdd4a6684e96f37265375620af05a88d98eb030d6afd40ee574e4b6df7f78ce59cf6cf2335a4e5975b5
-
SSDEEP
384:5pQaggEG94iwn+zd8F3wQKwbvDOmYAcbN7ENucuhhu2Blrc7/oLB:oaggEAInehQnzBFMSTQNc
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
c5a48bb64dd734fba227d32db705ad1530e3e89ca4e540ce572266184f8709d3.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vmpDATA Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shoooo Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mdn Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 1024B - Virtual size: 528B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ