Static task
static1
Behavioral task
behavioral1
Sample
vscan.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
vscan.exe
Resource
win10v2004-20221111-en
General
-
Target
vscan.exe
-
Size
276KB
-
MD5
b71eac5c7895782186a6cf79f2151ddd
-
SHA1
da2c041becabe114b6ec2c0a99fde471323451b1
-
SHA256
94719ece89b8bc24cb643540afa32d30849289661bb36917b5781646d7b35776
-
SHA512
0a3b4aca9c1d1d72a8ed6c00426348b538f7e39bcf8d9ffe9d34a6755fa92ce40c29415df900b16098ab948fcd4c069582dff2a13abe7b4111ed4758a522ccad
-
SSDEEP
3072:T8wtpWkgXK31fxZJdMWNQCGOkqOF+2bUySRGUAOseCDJzLdiLd0HtRa:Ywv9gXK3dJdMcNL2bBFUx0KYa
Malware Config
Signatures
Files
-
vscan.exe.exe windows x86
19b759738ac698be063c6a406fe0b7bb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryW
GetConsoleScreenBufferInfo
FreeLibrary
GetTickCount
IsBadReadPtr
GetCurrentThreadId
Sleep
GetCurrentProcess
GetStdHandle
CloseHandle
OutputDebugStringW
WriteFile
SetFilePointer
CreateFileW
FindClose
FindFirstFileW
GetFileAttributesExW
LocalFree
FormatMessageA
LoadLibraryExW
VirtualFree
VirtualAlloc
WideCharToMultiByte
MultiByteToWideChar
HeapAlloc
GetProcessHeap
HeapFree
QueryPerformanceFrequency
QueryPerformanceCounter
GetFileSizeEx
ReadFile
FlushFileBuffers
SetEndOfFile
GetFileAttributesW
SetFileAttributesW
GetLastError
FindNextFileW
SetLastError
lstrcpyW
IsBadWritePtr
CreateMutexW
WaitForSingleObject
ReleaseMutex
GetThreadPriority
SetThreadPriority
CreateEventW
SetEvent
GetCurrentProcessId
InterlockedExchangeAdd
RtlUnwind
GetSystemTimeAsFileTime
GetModuleHandleA
ExitProcess
RaiseException
GetFullPathNameW
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
HeapReAlloc
CreateDirectoryW
DeleteFileW
GetConsoleCP
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
SetEnvironmentVariableW
MoveFileW
ExitThread
CreateThread
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
InterlockedDecrement
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameA
DeleteCriticalSection
LoadLibraryA
InitializeCriticalSection
HeapDestroy
HeapCreate
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetCurrentDirectoryA
GetDriveTypeA
CreateFileA
HeapSize
SetHandleCount
GetFileType
GetStartupInfoA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
GetTimeZoneInformation
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
advapi32
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
Sections
.text Size: 196KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ