General
-
Target
fea1933830a69ff3636b0309df6d91b7b425c2d6577ca584629204ae356ab524
-
Size
884KB
-
MD5
7aafc60290b1ccec06c76fb8d06d7a7b
-
SHA1
260e5cdeba05c36d5edcf0d0dc280719eacfd611
-
SHA256
fea1933830a69ff3636b0309df6d91b7b425c2d6577ca584629204ae356ab524
-
SHA512
d82a97846f4b5af3612766c07c9327968816ba8fbca8e45f1cebd0d170d0e48e96f1a0f91456e95318e1bc6bcaf57a6a46eefcd010a34a1a6b67933336343692
-
SSDEEP
12288:UMrAn/yZdtZveNAGiVJvfGmuSjOUe6lF7GEfyu9btUi6kvJstvNAK3hx:xw/yZHZveNGJGfMFe6baeUPkxstvNAO
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
fea1933830a69ff3636b0309df6d91b7b425c2d6577ca584629204ae356ab524.exe windows x86
f7d395b02fd84c456018145139ebb605
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetVersion
WriteConsoleW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CharUpperBuffW
Sections
.text Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 374KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 589KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 688KB - Virtual size: 687KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ