7913b226fcbc3c4ed2b23b8676b83299b347c03dfffbea0a2e26cd3b0de7ec19

Sharing

Copy URL Twitter E-mail

General

Target

7913b226fcbc3c4ed2b23b8676b83299b347c03dfffbea0a2e26cd3b0de7ec19
Size

1.5MB
MD5

494c9f69f3acc2c2501af95759ed656c
SHA1

4f5797e2c47af9cd48498dc5df076212756ae99d
SHA256

7913b226fcbc3c4ed2b23b8676b83299b347c03dfffbea0a2e26cd3b0de7ec19
SHA512

cd2903f57ad5ae28965e8b6fc830d6c2914b437e03047a504e092fc06b8c927669848119bb3cdc1d2dfff530885cfc50148bcb6f91ea6f53442daee65f6959eb
SSDEEP

24576:0rtY6vh28GcaG2Yu+xAfYpRHKPyiIvwtB9FSFwyOJNIdMtgumcu6mwK:UFh2MGyItsmyObIqtvu

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Files

7913b226fcbc3c4ed2b23b8676b83299b347c03dfffbea0a2e26cd3b0de7ec19
.exe windows x86

573ffaba2bd2006c85bb4048bdb33568

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamProperty

ws2_32

accept

kernel32

GetVersionExA
GetVersion
FlushFileBuffers
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetCursorPos

gdi32

GetWindowOrgEx

winspool.drv

OpenPrinterA

advapi32

RegSetValueExA

shell32

Shell_NotifyIconA

ole32

OleRun

oleaut32

LoadTypeLi

comctl32

ImageList_Destroy

comdlg32

GetOpenFileNameA

Sections

.text
Size: - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 895KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

573ffaba2bd2006c85bb4048bdb33568

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

comdlg32

Sections

.text Size: - Virtual size: 1.6MB

.rdata Size: - Virtual size: 209KB

.data Size: - Virtual size: 231KB

.vmp0 Size: - Virtual size: 895KB

.vmp1 Size: 1.5MB - Virtual size: 1.5MB

.rsrc Size: 8KB - Virtual size: 5KB

.text
Size: - Virtual size: 1.6MB

.rdata
Size: - Virtual size: 209KB

.data
Size: - Virtual size: 231KB

.vmp0
Size: - Virtual size: 895KB

.vmp1
Size: 1.5MB - Virtual size: 1.5MB

.rsrc
Size: 8KB - Virtual size: 5KB