Behavioral task
behavioral1
Sample
31f0e4d025a4b33b7cf09128a6a8df6c465c2659e6d0a3fed42858a54bcb5728.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
31f0e4d025a4b33b7cf09128a6a8df6c465c2659e6d0a3fed42858a54bcb5728.exe
Resource
win10v2004-20221111-en
General
-
Target
31f0e4d025a4b33b7cf09128a6a8df6c465c2659e6d0a3fed42858a54bcb5728
-
Size
680KB
-
MD5
24273f221b20c0395468f4d3d1ae874e
-
SHA1
bbbce5ad7464933e0e6d4c0d229cd4b7a8dcda89
-
SHA256
31f0e4d025a4b33b7cf09128a6a8df6c465c2659e6d0a3fed42858a54bcb5728
-
SHA512
d9cbd9c0eea5fcc1312e6edca1a9527c99662ef3da18f49e1899bf42dcf560c3d48ef182c3a90cfe74d9100c3be43875e10a158dc4e2df3129f72043797091f1
-
SSDEEP
12288:yUbcSXy1dmKcThF/fNziDYkGYVkobY2aaQXg6zGQdwvlWf3n5yPAfUTSzmn:PbfyKKG4EkGCi5sQavQv5OAcTTn
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
31f0e4d025a4b33b7cf09128a6a8df6c465c2659e6d0a3fed42858a54bcb5728.exe windows x86
beee96d56dd478312b1c316bef14d58c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
ObfDereferenceObject
IoAllocateMdl
MmProbeAndLockPages
MmMapLockedPagesSpecifyCache
MmUnlockPages
IoFreeMdl
ExAllocatePool
ExFreePool
NtQuerySystemInformation
hal
KeGetCurrentIrql
HalMakeBeep
Sections
.text Size: - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 894B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 577KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp2 Size: 678KB - Virtual size: 678KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ