8632a66a7c73bdd0975bcae0b15f9ebde9da2bfb793c2119dd616c3953ac180b

Sharing

Copy URL Twitter E-mail

General

Target

8632a66a7c73bdd0975bcae0b15f9ebde9da2bfb793c2119dd616c3953ac180b
Size

13.6MB
MD5

de118d273a4cb146548bb9a4d434062b
SHA1

68edb8d41176064e97fe75fd421ceaa2750cc4cd
SHA256

8632a66a7c73bdd0975bcae0b15f9ebde9da2bfb793c2119dd616c3953ac180b
SHA512

8988bcdfa6e2d12c0310ad1926cc51f46be09d15ded599e2a2bf098f51fbd766129a6508e415a22f673bb4f7dfed0477d1d4a569919f32f2488f995f56071a64
SSDEEP

393216:krYCkcndi961WReQIXRuYeB8e8blDRXdxv5w:oYJcnd0HReB/DbXXdxB

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Files

8632a66a7c73bdd0975bcae0b15f9ebde9da2bfb793c2119dd616c3953ac180b
.exe windows x86

4278e0249159bb13a1e1284652cf4baa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

winmm

waveOutGetNumDevs

ws2_32

inet_ntoa

rasapi32

RasGetConnectStatusA

kernel32

lstrcpynA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

ReleaseDC
MessageBoxA

gdi32

RectVisible

winspool.drv

OpenPrinterA

advapi32

RegSetValueExA

shell32

DragQueryFileA

ole32

OleRun

oleaut32

SafeArrayGetUBound

comctl32

ImageList_Add

wininet

InternetOpenUrlA

comdlg32

GetSaveFileNameA

Sections

.text
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 10.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 13.6MB - Virtual size: 13.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4278e0249159bb13a1e1284652cf4baa

Headers

File Characteristics

Imports

iphlpapi

winmm

ws2_32

rasapi32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wininet

comdlg32

Sections

.text Size: - Virtual size: 1.6MB

.rdata Size: - Virtual size: 3.6MB

.data Size: - Virtual size: 330KB

.rsrc Size: 96KB - Virtual size: 109KB

.vmp0 Size: - Virtual size: 10.8MB

.vmp1 Size: 13.6MB - Virtual size: 13.6MB

.text
Size: - Virtual size: 1.6MB

.rdata
Size: - Virtual size: 3.6MB

.data
Size: - Virtual size: 330KB

.rsrc
Size: 96KB - Virtual size: 109KB

.vmp0
Size: - Virtual size: 10.8MB

.vmp1
Size: 13.6MB - Virtual size: 13.6MB