f536ca587aee4258e43822a737d4f9910b341b502eae7a4b674c57d2b9a8638c

Sharing

Copy URL Twitter E-mail

General

Target

f536ca587aee4258e43822a737d4f9910b341b502eae7a4b674c57d2b9a8638c
Size

1.3MB
MD5

e36be871981d3759ebb9416e63574f7b
SHA1

a4b3ad1cfd1d346744fd5bb97385ca634d44704e
SHA256

f536ca587aee4258e43822a737d4f9910b341b502eae7a4b674c57d2b9a8638c
SHA512

4d857d49d16657506ebb0f3ac8f98a7c00e41c84ef248154f9df6b6d3bf15bd92d0576b9ff6b739c4a857a53f258f1b6fb326ad63309a5fe85cca06beb43dba7
SSDEEP

24576:kbHTLmIt2pYQx4lWgxoxXgd129x88d1DrVquxSOySONxW/jMcj38:2HTpIpYAgxeQd28C1DrVqCSOyHWbF

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Files

f536ca587aee4258e43822a737d4f9910b341b502eae7a4b674c57d2b9a8638c
.exe windows x86

273557dfdc5f68dd8f591682512ce281

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
WideCharToMultiByte
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

DrawIcon

gdi32

StretchBlt

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

comctl32

InitCommonControlsEx

oledlg

ord8

ole32

CoTaskMemAlloc

olepro32

ord253

oleaut32

VariantCopy

msvcp60

??0_Lockit@std@@QAE@XZ

msvcrt

calloc

Sections

.text
Size: - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 186KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 1001KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��?�uj
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

273557dfdc5f68dd8f591682512ce281

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

msvcp60

msvcrt

Sections

.text Size: - Virtual size: 333KB

.rdata Size: - Virtual size: 57KB

.data Size: - Virtual size: 186KB

.vmp0 Size: - Virtual size: 1001KB

.vmp1 Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 16KB - Virtual size: 14KB

���?�uj Size: 20KB - Virtual size: 20KB

.text
Size: - Virtual size: 333KB

.rdata
Size: - Virtual size: 57KB

.data
Size: - Virtual size: 186KB

.vmp0
Size: - Virtual size: 1001KB

.vmp1
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 16KB - Virtual size: 14KB

��?�uj
Size: 20KB - Virtual size: 20KB