Static task
static1
Behavioral task
behavioral1
Sample
vgmjuice.exe
Resource
win10-20230220-en
General
-
Target
vgmjuice.exe
-
Size
112KB
-
MD5
32c08a9f3eff82a3854a84fe4a1cfd54
-
SHA1
2c214a7d4ff334052c8fe4aece1c3e218b539daa
-
SHA256
2150659c678a9526d6d5043704e1110f339040089fdedcdf8eb5876fe55871b3
-
SHA512
ea8799f5819b0b2ac95766f443d0e2cb7cbb491708e744ce4ddb79c3ccf615a9edbe8a1e09fc02c4a8cc83fcf317d169875fbb4e7948676ebe673382d04f4fd2
-
SSDEEP
1536:daWAcb9VdNfTFI+oX16Iw9Ohm4/RkUYU0E356qXcUfnmqfyvY7Wh:DAcbhNrFI+e1uAm8xXDfyvY7Wh
Malware Config
Signatures
Files
-
vgmjuice.exe.exe windows x86
0ef1b58f9b66c696177efc7bafa7accc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RaiseException
RtlUnwind
EncodePointer
DecodePointer
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetCommandLineA
HeapSetInformation
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetProcAddress
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
CloseHandle
InitializeCriticalSectionAndSpinCount
Sleep
HeapSize
ExitProcess
HeapCreate
GetStdHandle
GetModuleFileNameW
MultiByteToWideChar
ReadFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
WriteConsoleW
SetStdHandle
FlushFileBuffers
CreateFileA
LoadLibraryW
GetStringTypeW
CreateFileW
SetEndOfFile
GetProcessHeap
CreateDirectoryA
Sections
.text Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ