Behavioral task
behavioral1
Sample
2381bd561aecebe2d5e82679e857057d7d86ef9cc49a9194510ab479b8c81612.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2381bd561aecebe2d5e82679e857057d7d86ef9cc49a9194510ab479b8c81612.exe
Resource
win10v2004-20230220-en
General
-
Target
2381bd561aecebe2d5e82679e857057d7d86ef9cc49a9194510ab479b8c81612
-
Size
4.4MB
-
MD5
34287eeeb9862b04346a096f5a332ddc
-
SHA1
73588352e6403f00da41e9fb0bc3ee76150f8819
-
SHA256
2381bd561aecebe2d5e82679e857057d7d86ef9cc49a9194510ab479b8c81612
-
SHA512
15b8386bbbd6834672d53eb951aa01eb0c6f02644fef99332abce33a5227af9914b5d400a68760fbc02d45dde0f2a1818093da5569fb898cc9792d7b231f474a
-
SSDEEP
98304:y/s3asr1q25JKMPPr1G84fxzIRfkqQw5kDx3MR6Dg/hAhBWu6Djuf1c:AlifHPPr08ScJ5kD1CpeBm2c
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
2381bd561aecebe2d5e82679e857057d7d86ef9cc49a9194510ab479b8c81612.exe windows x86
718acc7e38eafc5de6bc4ede1fbc1c5a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
ScaleViewportExtEx
gdiplus
GdipCreateFromHDC
user32
MessageBoxA
kernel32
GetVersion
GetVersionExA
GetVersionExA
GetVersion
Sleep
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
ole32
CreateStreamOnHGlobal
imm32
ImmGetCompositionStringW
shell32
SHGetMalloc
shlwapi
PathFileExistsA
winmm
waveOutUnprepareHeader
ws2_32
socket
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
rasapi32
RasGetConnectStatusA
winspool.drv
DocumentPropertiesA
comdlg32
GetSaveFileNameA
advapi32
RegQueryValueA
oleaut32
LoadTypeLi
comctl32
ImageList_Destroy
wininet
HttpQueryInfoA
Sections
.text Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 704KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ