brum[.]vmp[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

brum.vmp.exe
Size

16.9MB
MD5

c918b2c5eba20d8cf822648d4cbadc0b
SHA1

f7381df8be537a363f26e6c5570f99f19d1f7fca
SHA256

6a93de7868ac84c839a5da41575add73a3d2d29279aa593f439f5cabf58b6b20
SHA512

fa04adb550c7f7ddf67d926b8128ca49259ea599fa606464d5400f84dd79952c43bbea7aa949dcf3ced1489cb66dfa50e41edbc30f477ac873f6354c082dcaaa
SSDEEP

393216:ucNR2JL0jU6icRV5W8Z06NqHih5GEL6aIVIgX4qFQF:1R2J8icbD06Nqc5GEL3oVX5c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
brum.vmp.exe

Files

brum.vmp.exe
.exe windows x86

e70d6f246b1d521ea7f531d495d5c541

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

ShellExecuteA

msvcrt

__argc

kernel32

SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 688B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0fa
Size: - Virtual size: 9.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.MWO
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

. (\
Size: 16.9MB - Virtual size: 16.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 753B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ