6892370d5a11178f5f3b5eb672553c9cf35816da3507047b2d86ad6ec64825cc

Sharing

Copy URL Twitter E-mail

General

Target

6892370d5a11178f5f3b5eb672553c9cf35816da3507047b2d86ad6ec64825cc
Size

5.9MB
MD5

2661084a3d168a7aeba29719cc7c19ac
SHA1

d4c5d7bcfa31f6f9a5f053d543248aaa2102a86d
SHA256

6892370d5a11178f5f3b5eb672553c9cf35816da3507047b2d86ad6ec64825cc
SHA512

f02b6c5707116c92f851cea5538fa67643b3e2b147135528c296013875890e40283a6ad5b72b2cbae79b9ea3f363f14deb282bf0edf8394ea1ebeb93f2c1aa6c
SSDEEP

98304:mYot9CfwDG3WOiCQPsn8HA2OIGmaymRtbNPJ2eD/CWr:mYMEj3KCQEohGm7mxQeD/CWr

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6892370d5a11178f5f3b5eb672553c9cf35816da3507047b2d86ad6ec64825cc

Files

6892370d5a11178f5f3b5eb672553c9cf35816da3507047b2d86ad6ec64825cc
.exe windows x64

05d75b1a27fbae2c9004e81cb55f8ff3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mediahelper

?MHDeleteInstance@@YAXPEAVIMediaManager@@@Z

utility

?common_log@@YAXPEBDZZ

bluraycreator

?BDCreatorNewInstance@@YAPEAVIBDCreator@@XZ

discburn

?DiscBurnNewInstance@@YAPEAVIDiscBurn@@XZ

dvdimage

MakeDVDImage

dvdcreator

?DVDCreatorDeleteInstance@@YAXPEAVIDVDCreator@@@Z

libeay32

ord3171

kernel32

InitializeCriticalSectionAndSpinCount
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

IsZoomed
GetProcessWindowStation
GetUserObjectInformationW

gdi32

DeleteDC

shell32

ShellExecuteW

qt5widgets

??0QStackedWidget@@QEAA@PEAVQWidget@@@Z

qt5gui

?height@QPixmap@@QEBAHXZ

qt5xml

?setAttribute@QDomElement@@QEAAXAEBVQString@@N@Z

qt5network

??1QLocalServer@@UEAA@XZ

qt5core

?readAll@QIODevice@@QEAA?AVQByteArray@@XZ

msvcp140

_Xtime_get_ticks

vcruntime140

__std_exception_copy

api-ms-win-crt-stdio-l1-1-0

_set_fmode

api-ms-win-crt-time-l1-1-0

_localtime64

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

_c_exit

api-ms-win-crt-filesystem-l1-1-0

_getdrives

api-ms-win-crt-string-l1-1-0

strcmp

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 543KB - Virtual size: 542KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 524KB - Virtual size: 524KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05d75b1a27fbae2c9004e81cb55f8ff3

Headers

DLL Characteristics

File Characteristics

Imports

mediahelper

utility

bluraycreator

discburn

dvdimage

dvdcreator

libeay32

kernel32

user32

gdi32

shell32

qt5widgets

qt5gui

qt5xml

qt5network

qt5core

msvcp140

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 543KB - Virtual size: 542KB

.rdata Size: 524KB - Virtual size: 524KB

.data Size: 13KB - Virtual size: 14KB

.pdata Size: 14KB - Virtual size: 13KB

.vmp0 Size: 2.6MB - Virtual size: 2.6MB

.vmp1 Size: 2.2MB - Virtual size: 2.2MB

.reloc Size: 10KB - Virtual size: 10KB

.rsrc Size: 68KB - Virtual size: 67KB

.text
Size: 543KB - Virtual size: 542KB

.rdata
Size: 524KB - Virtual size: 524KB

.data
Size: 13KB - Virtual size: 14KB

.pdata
Size: 14KB - Virtual size: 13KB

.vmp0
Size: 2.6MB - Virtual size: 2.6MB

.vmp1
Size: 2.2MB - Virtual size: 2.2MB

.reloc
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 68KB - Virtual size: 67KB