Static task
static1
Behavioral task
behavioral1
Sample
brum.vmp.exe
Resource
win10v2004-20230703-en
General
-
Target
brum.vmp.exe
-
Size
16.9MB
-
MD5
c918b2c5eba20d8cf822648d4cbadc0b
-
SHA1
f7381df8be537a363f26e6c5570f99f19d1f7fca
-
SHA256
6a93de7868ac84c839a5da41575add73a3d2d29279aa593f439f5cabf58b6b20
-
SHA512
fa04adb550c7f7ddf67d926b8128ca49259ea599fa606464d5400f84dd79952c43bbea7aa949dcf3ced1489cb66dfa50e41edbc30f477ac873f6354c082dcaaa
-
SSDEEP
393216:ucNR2JL0jU6icRV5W8Z06NqHih5GEL6aIVIgX4qFQF:1R2J8icbD06Nqc5GEL3oVX5c
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource brum.vmp.exe
Files
-
brum.vmp.exe.exe windows x86
e70d6f246b1d521ea7f531d495d5c541
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
shell32
ShellExecuteA
msvcrt
__argc
kernel32
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
Sections
.text Size: - Virtual size: 688B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 4B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0fa Size: - Virtual size: 9.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.MWO Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
. (\ Size: 16.9MB - Virtual size: 16.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 753B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ