Static task
static1
Behavioral task
behavioral1
Sample
VDA.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
VDA.exe
Resource
win10v2004-20220812-en
General
-
Target
VDA.exe
-
Size
16KB
-
MD5
813cc4af52c70bb16be2d2be37a37ca4
-
SHA1
9f297803979b12f22958f429fbb45ead7abe799b
-
SHA256
8876d87aa56af501c3332fb4f3ea519b2dfe440a65410430bc57c4d414129eb4
-
SHA512
be3a90f646a32724afb9dee027e4d00989a19c3b55d2fb76431024cda7cabe9802bc7c8917d6b8feb0a4daf94cf866df832f3896fed64363e5b360fc2569a34e
-
SSDEEP
96:rUEPHtSO3WXBbMyMtQAqrX6qq6tX6MX6a8X6vX6f4vX6uX6yJ5zj5QuFMLfXc1QU:QEftSHOFb3anSASxxPyAHyfqgz278
Malware Config
Signatures
Files
-
VDA.exe.exe windows x86
ff054882fb584b35cca03e1f00d97ebf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
vda
RHBinder__ShimExeMain
Sections
.rdata Size: 512B - Virtual size: 92B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ