Behavioral task
behavioral1
Sample
077ae246699201eb50c4cefecf30f55b822aeb92e3b0da09b3332347160bcbba.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
077ae246699201eb50c4cefecf30f55b822aeb92e3b0da09b3332347160bcbba.exe
Resource
win10v2004-20221111-en
General
-
Target
077ae246699201eb50c4cefecf30f55b822aeb92e3b0da09b3332347160bcbba
-
Size
2.4MB
-
MD5
c7332cc9e3e9fce0c185c0d08b39dd48
-
SHA1
86cfb79b9b958b21c6073213bfa19a3c958b7060
-
SHA256
077ae246699201eb50c4cefecf30f55b822aeb92e3b0da09b3332347160bcbba
-
SHA512
af058bcd94347e695e4085f88ea6e8bd0c59a9cc6b7f507e062b1d34218a16ab4a0af10a5e706b0710470711bf15082593057c4c1db799cccd5ce903fb675cc4
-
SSDEEP
49152:rTlUEE+tNrCMZ8iA0SGilvZhsvN1ELmwYCXqjUuiW8ubICjW2mIpaeZitwuXr:rhUEXNvnSGilvEXELmJPjF/NsXIpa2i5
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
077ae246699201eb50c4cefecf30f55b822aeb92e3b0da09b3332347160bcbba.exe windows x86
c29d2b1b528d7f68243b259573549232
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiStreamClose
ws2_32
ntohs
rasapi32
RasGetConnectStatusA
kernel32
InterlockedIncrement
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
InflateRect
gdi32
GetViewportOrgEx
winspool.drv
ClosePrinter
advapi32
RegCreateKeyA
shell32
DragAcceptFiles
ole32
OleFlushClipboard
oleaut32
SafeArrayGetElement
comctl32
ImageList_EndDrag
oledlg
ord8
wininet
InternetOpenA
comdlg32
GetSaveFileNameA
Sections
.text Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 979KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 931KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 157KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ