Static task
static1
Behavioral task
behavioral1
Sample
VMware.Workstation.Pro.17.kg.exe
Resource
win10-20220812-en
Behavioral task
behavioral2
Sample
VMware.Workstation.Pro.17.kg.exe
Resource
win7-20220901-en
Behavioral task
behavioral3
Sample
VMware.Workstation.Pro.17.kg.exe
Resource
win10v2004-20221111-en
General
-
Target
VMware.Workstation.Pro.17.kg.exe
-
Size
47KB
-
MD5
b405ed12f76feac7f2c243bdac703cb0
-
SHA1
d155e418630158e0ef26150a1af68d35206b51bb
-
SHA256
9ae73076ed2ed9f96a1989ed14d6daea5b199daab3a5f3956fbaf6c5ad8ba624
-
SHA512
bdafcf1c23078ff8f1d46fde2fa1e3a37ebb3a12fb92bc45f3f7a1fe10a9bf0ee0b2894c2f3efe6fb07f18145be32283d42de12d40dd02c89af77b763896e4c6
-
SSDEEP
768:a4Wrpv91btqO+fxbTGjLzzgZTLWH4HyagcZP5ZVQhrd:p+/16fxP6LzzgZLWHyyCZxZwJ
Malware Config
Signatures
Files
-
VMware.Workstation.Pro.17.kg.exe.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1012B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 364B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ