Behavioral task
behavioral1
Sample
7c417d674869c51ebc5fa970f50d627e.exe
Resource
win7-20230220-en
General
-
Target
7c417d674869c51ebc5fa970f50d627e.exe
-
Size
732KB
-
MD5
7c417d674869c51ebc5fa970f50d627e
-
SHA1
32a5346da262b5b933d5e0b1c048c610a9895b7f
-
SHA256
7879810c77051fc129fd4d107c327a9b5e039921975bced09800bffaf55e3bea
-
SHA512
ddf81e4329f6ff02df2b59b2e12e0882a157742370e9b4965e69fc87d822141856b01482e0be3d672e7301eadd9d251041db86714879dfc3b758605e0ef7d7d5
-
SSDEEP
12288:0H9rADjqyKi6HC6PxrXBGasKuSB9mdxXnHTi6oT4M1LydJIPIh:Yl0+C6ZrXoa+Tib4M1LydJ8I
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
7c417d674869c51ebc5fa970f50d627e.exe.exe windows x86
d841d50e2bc0fe8c16f07f174c3899ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
GetVersion
GetLastError
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxW
Sections
.text Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 374KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 708KB - Virtual size: 705KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ