Behavioral task
behavioral1
Sample
f7394d9ac3c6209086b62dc1257de0508b19f4bbc85278c70718a16d9bb28aa1.exe
Resource
win7-20220812-en
General
-
Target
f7394d9ac3c6209086b62dc1257de0508b19f4bbc85278c70718a16d9bb28aa1
-
Size
2.9MB
-
MD5
617ae9503e0267d2fe235ca9eb134352
-
SHA1
572032964f235cc5ef30470a2314efd314ebc53b
-
SHA256
f7394d9ac3c6209086b62dc1257de0508b19f4bbc85278c70718a16d9bb28aa1
-
SHA512
265588980040f69375be160ea3f2f21490d7742d91a5978263e31662a4f9734f0bba104c6ef51de4c9676d96870094e4833943eb6627bbc94440f0a49b346953
-
SSDEEP
49152:LKGS8ktQL8VTSEHWSNgxthQlKt24sUu7FqFDROl36n/nr8KizXQ1Z/Eplm5T:LRS87YpS8NCt/txTFg5G/3iE1Z2ST
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
f7394d9ac3c6209086b62dc1257de0508b19f4bbc85278c70718a16d9bb28aa1.exe windows x86
7e74c73f9c142b57d7b51b96636fe27f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiStreamOpen
ws2_32
recvfrom
kernel32
FindFirstFileA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
SetScrollPos
gdi32
SelectObject
winspool.drv
DocumentPropertiesA
advapi32
RegCreateKeyExA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromString
oleaut32
RegisterTypeLi
comctl32
ImageList_Destroy
wininet
InternetOpenA
comdlg32
GetOpenFileNameA
Sections
.text Size: - Virtual size: 506KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ