Static task
static1
Behavioral task
behavioral1
Sample
vsco5.exe
Resource
win10v2004-20230220-en
General
-
Target
vsco5.exe
-
Size
3.0MB
-
MD5
c553f139181d01a43f01717c22561358
-
SHA1
d27ea6cad2243664fa6527cc3da748b5bd325d13
-
SHA256
11f018d561566d75529ecb3c98c0a03ab9bb61e1a6b037a13b102692242363b4
-
SHA512
be8708007699e1dd104a1806da722e08a817b94dbd941773817ed5decab521dc4a7fe5702e78c1be66d1cf9c737f486309381025c458397b75a3584c5bb44dc6
-
SSDEEP
49152:qKm51jc9rTJxuSric6c1+LncxpfnObRoFUfSPsNUmPaifv1AiBYqi7K:Zmbj8rTJxuSxUqpfObRoFTjma7q
Malware Config
Signatures
Files
-
vsco5.exe.exe windows x64
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
lstrcpy
Sections
Size: 1.6MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sbxbtgdv Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
glsuhlpw Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 57KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ