vacban[.]vmp[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

vacban.vmp.exe
Size

18.9MB
MD5

f2aba6ba58ffd3ab12c90d5e30891ee6
SHA1

14563f70fc4eb1c088e436e374de1cf92e89a777
SHA256

a24e636b76bea19a57fd6a673f935a40931248a4e2f0040fec61fec2b0f76a14
SHA512

e9ff3a38523b46ba2a46017f7b414c86c5f359dfab69ffb2166d0dcc63edf10fb7d1c4ec4c130a8dc3750bcc087d08e45a4be8396b052cd03779872cbcc8528d
SSDEEP

393216:TvdmTzHWHp9xFyw4xKPWDn300rXTKxEXMHw3h78s2mhjhzJx:T1MTWHjQK8nk0rXOxc320hp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vacban.vmp.exe

Files

vacban.vmp.exe
.exe windows x86

e70d6f246b1d521ea7f531d495d5c541

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

ShellExecuteA

msvcrt

__argc

kernel32

SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 688B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.j;E
Size: - Virtual size: 10.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.4?w
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Rxx
Size: 18.9MB - Virtual size: 18.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 762B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ