Behavioral task
behavioral1
Sample
389c0e627c0212dce951e475243b1a682b76cce1aa83ba11299515b6a19e06e0.exe
Resource
win7-20230220-en
General
-
Target
bd1cd372a0623edbddddf0f4f3cc569f.bin
-
Size
724KB
-
MD5
ee6e309eb1398a2c0b78d25f73fc1dba
-
SHA1
87680a8b106d3c6da6c935dc0f982341c3fd60da
-
SHA256
74b316c45961f6089c750ad2f8b05036c1e57d46450f53c9abdddceeb57ab317
-
SHA512
b4c369e876c1b5b78b21d6bd217c05971dfd93533341f6dab614bf7f6c682e383456edf4ff59acc78ce2f81ba04deac9bf7b669d20a4c7ed40bba16a3c8c46c8
-
SSDEEP
12288:Hp/71LsLDbTk0ISd6N7A9eQiWhLivfhhQVS/I3vmYntmw5dkfD9/+mqeIjw+5oiL:J/xSbTkPW6JD/qq5hDA3Lmw8fD4mq9jJ
Malware Config
Signatures
-
resource yara_rule static1/unpack001/389c0e627c0212dce951e475243b1a682b76cce1aa83ba11299515b6a19e06e0.exe vmprotect
Files
-
bd1cd372a0623edbddddf0f4f3cc569f.bin.zip
Password: infected
-
389c0e627c0212dce951e475243b1a682b76cce1aa83ba11299515b6a19e06e0.exe.exe windows x86
Password: infected
2fec0a0b5a0b15ab1d7ec3c56dc7ca16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetVersion
HeapCreate
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxW
Sections
.text Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 374KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 605KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 696KB - Virtual size: 693KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 176KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ