Behavioral task
behavioral1
Sample
c71ddc8a914522b9ac64c5467a4395227b0621d98ed8ab8518fdd268f4aef8b1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c71ddc8a914522b9ac64c5467a4395227b0621d98ed8ab8518fdd268f4aef8b1.exe
Resource
win10v2004-20220812-en
General
-
Target
c71ddc8a914522b9ac64c5467a4395227b0621d98ed8ab8518fdd268f4aef8b1
-
Size
56KB
-
MD5
4af510d6454ecbd83daed9db2902c77c
-
SHA1
c04eeb35d97af5df7f14cbd0dd7cc5e86d0d65e9
-
SHA256
c71ddc8a914522b9ac64c5467a4395227b0621d98ed8ab8518fdd268f4aef8b1
-
SHA512
c4f78d7cd900c3440e9d4e3da5cdd502ca012952eace2de3ec523ebb528d610c92dbde76c317142d698a0006292dc139f92a15eb025bb53a4bc4cc30f9951f39
-
SSDEEP
1536:8pgDg7DwdQvSfm4qf7MjAeqRKrF0qFQmD3Nk2ksFMyY:bRBmHeA/STi2k0MyY
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
c71ddc8a914522b9ac64c5467a4395227b0621d98ed8ab8518fdd268f4aef8b1.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 318KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 241KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 494KB - Virtual size: 493KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ