Vector Magic Desktop Edition 1[.]15 portable[.]zip

General

Target

Vector Magic Desktop Edition 1.15 portable.zip
Size

12.6MB
MD5

44397780c2fb6b143e2fceaf0029dbf0
SHA1

20fc733cb3eec8955e0a14f6f736084aefdb33cf
SHA256

a902c3e60b7515f4fcc9cc913148ed3a291169bf115b982cea895466a9e72fd9
SHA512

b8c08f9603ccd6613365b62f8c331997f83168638d1051b2c567c5841c396d62410069149ba87cb99b20d3d23a31f66661080874d132fb9a1811a1544c43b473
SSDEEP

393216:q3iaRlEonv0wPUq3fAqe/tE4vltfRHvBx5xtM85:qipGwdBRPnO4

Score

N/A

Malware Config

Signatures

Files

Vector Magic Desktop Edition 1.15 portable.zip
.zip

Password: infectedvm250
Vector Magic(SoftLab-Portable.ru).dat
.exe windows x86

Password: infectedvm250

0b9338b9562c4b0faee7417fba6636f0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
UnmapViewOfFile
VirtualAlloc
VirtualFree
GetModuleHandleA
VirtualProtect
SetLastError
LoadLibraryA
LoadLibraryExA
lstrcatA
lstrcpyA
GetModuleFileNameA
GetProcAddress
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
LoadLibraryExW
lstrcatW
ReadFile
SetFilePointer
ExitProcess
FormatMessageA
GetCurrentProcess
MapViewOfFileEx
CloseHandle
MapViewOfFile
CreateFileMappingW
SetEnvironmentVariableW
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW

user32

MessageBoxA
wsprintfW

ntdll

LdrLoadDll
NtProtectVirtualMemory
LdrGetProcedureAddress

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Vector Magic.exe
.exe windows x86

Password: infectedvm250

0b9338b9562c4b0faee7417fba6636f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
GetModuleHandleW
Sleep
GetLastError
MoveFileW
GetSystemTimeAsFileTime
DeleteFileW
lstrcpyW
lstrlenW
GetEnvironmentVariableW
lstrcmpA
lstrlenA
UnmapViewOfFile
VirtualAlloc
VirtualFree
GetModuleHandleA
VirtualProtect
SetLastError
LoadLibraryA
LoadLibraryExA
lstrcatA
lstrcpyA
GetModuleFileNameA
GetProcAddress
HeapFree
FreeLibrary
HeapAlloc
GetProcessHeap
LoadLibraryW
LoadLibraryExW
lstrcatW
ReadFile
SetFilePointer
ExitProcess
FormatMessageA
GetCurrentProcess
MapViewOfFileEx
CloseHandle
MapViewOfFile
CreateFileMappingW
SetEnvironmentVariableW
GetFileSize
CreateFileW
WideCharToMultiByte
lstrcpynW

user32

MessageBoxA
wsprintfW

ntdll

LdrLoadDll
NtProtectVirtualMemory
LdrGetProcedureAddress

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infectedvm250

Password: infectedvm250

0b9338b9562c4b0faee7417fba6636f0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ntdll

Sections

.text Size: 12KB - Virtual size: 12KB

.res Size: 14KB - Virtual size: 16KB

Password: infectedvm250

0b9338b9562c4b0faee7417fba6636f0

Headers

File Characteristics

Imports

kernel32

user32

ntdll

Sections

.text Size: 12KB - Virtual size: 12KB

.res Size: 15KB - Virtual size: 16KB

.text
Size: 12KB - Virtual size: 12KB

.res
Size: 14KB - Virtual size: 16KB

.text
Size: 12KB - Virtual size: 12KB

.res
Size: 15KB - Virtual size: 16KB