Behavioral task
behavioral1
Sample
8fc836ff05640803eeb1bdbf5b9ca360.exe
Resource
win7-20221111-en
General
-
Target
8fc836ff05640803eeb1bdbf5b9ca360.exe
-
Size
760KB
-
MD5
8fc836ff05640803eeb1bdbf5b9ca360
-
SHA1
42e95eb613c19fd4309f4e68954e999ea2b3db63
-
SHA256
aba02983e515624eb5d2294566708bd69b7e792d39b58eeeb543a88960543aa4
-
SHA512
32125f16ba6273cb362c893c656f9fb04c06a5a96ac9493f33f03f24a11d7866659e54a498ef420b2fc83b1110a5d2bfb2581f3657d4d299db0fff4346a0ebf7
-
SSDEEP
12288:8ZISRtYZouCPPkLn7RSotjckeayscz1wQudN/NjcqrQOQrvnBlHSt9J8E54C/v3h:FSD8o1k5So5eays8zudXg4zlaCXxvek
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
8fc836ff05640803eeb1bdbf5b9ca360.exe.exe windows x86
f4555f09ef06a4462b56a44bf7729d87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetVersion
IsValidCodePage
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 374KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 642KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 736KB - Virtual size: 735KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ