Static task
static1
Behavioral task
behavioral1
Sample
Optimum.win.vmp.exe
Resource
win10v2004-20230220-en
General
-
Target
Optimum.win.vmp.exe
-
Size
16.6MB
-
MD5
6b8505e49abfa300fb0ec1e73efa4ac5
-
SHA1
6a39c0914ad06b43afea580ea1dd2210fa43fff8
-
SHA256
d04229ac4ca35839ff887ae4f081081ddcbfb4ee1fdda573b3df61eb3ddbaaef
-
SHA512
6cd94644b19e63060969fdd972eca092129f0bdf66e8f83b5039446ef8b1433cc967fcfb670fb2c46e4c759aa2404de1fde3595a66d5dd52734b97f10fe74211
-
SSDEEP
393216:v9g6lbr/eHKoP4wZtncAooYhHHWKGyAXZI4nPtd3Vxh1gejZP/:1g6Fr/et1ZVcBXh5G5Z9nPtttaeFP
Malware Config
Signatures
Files
-
Optimum.win.vmp.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: - Virtual size: 8.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.*QV Size: - Virtual size: 201KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.-Jw Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.H4r Size: 16.3MB - Virtual size: 16.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ