8c5ece37858b1bbd3a1556f51674ffd5c3c97d8a6328ed305a162c775534b0f4

Sharing

Copy URL Twitter E-mail

General

Target

8c5ece37858b1bbd3a1556f51674ffd5c3c97d8a6328ed305a162c775534b0f4
Size

1.9MB
MD5

d5b1969d2b48c277199b38ddadd25a9c
SHA1

8aca86d199e5cf00aaf9c2b1ceb0fa8f802908b8
SHA256

8c5ece37858b1bbd3a1556f51674ffd5c3c97d8a6328ed305a162c775534b0f4
SHA512

56ad4e3b89b8aea7b9cb3505b95078efe2e0717c23aaef80fa77654ed8749717d773ba8b7461766bcfacf97ffad367bc25a5671eceff713cb76fb3229859bdfb
SSDEEP

49152:R0LunB43O/HLEeG+e+skKwL40NUyCYFqETsv:8uB4UHLEH/kPruRpp

Score

8^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Files

8c5ece37858b1bbd3a1556f51674ffd5c3c97d8a6328ed305a162c775534b0f4
.exe windows x86

34f4d905262d131451e702e69e98c0e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamStop

ws2_32

send

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA

kernel32

GetVersionExA
GetVersion
DeleteCriticalSection
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

SendDlgItemMessageA

gdi32

EndPage

msimg32

GradientFill

winspool.drv

ClosePrinter

comdlg32

ChooseColorA

advapi32

RegCreateKeyExA

shell32

DragFinish

ole32

CoTaskMemAlloc

oleaut32

SafeArrayGetUBound

comctl32

ImageList_AddMasked

oledlg

ord8

wininet

InternetTimeToSystemTime

Sections

.text
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 606KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 413KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34f4d905262d131451e702e69e98c0e3

Headers

File Characteristics

Imports

winmm

ws2_32

msvfw32

avifil32

kernel32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

wininet

Sections

.text Size: - Virtual size: 1.9MB

.rdata Size: - Virtual size: 606KB

.data Size: - Virtual size: 413KB

.vmp0 Size: - Virtual size: 1.2MB

.vmp1 Size: 1.8MB - Virtual size: 1.8MB

.rsrc Size: 8KB - Virtual size: 6KB

.text
Size: - Virtual size: 1.9MB

.rdata
Size: - Virtual size: 606KB

.data
Size: - Virtual size: 413KB

.vmp0
Size: - Virtual size: 1.2MB

.vmp1
Size: 1.8MB - Virtual size: 1.8MB

.rsrc
Size: 8KB - Virtual size: 6KB