Behavioral task
behavioral1
Sample
57183b0c9c5dfa77e5de2f598edc60fa69e5536d652ec0406ae3ddba9b7d93c1.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
57183b0c9c5dfa77e5de2f598edc60fa69e5536d652ec0406ae3ddba9b7d93c1.exe
Resource
win10v2004-20230703-en
General
-
Target
57183b0c9c5dfa77e5de2f598edc60fa69e5536d652ec0406ae3ddba9b7d93c1.exe
-
Size
605KB
-
MD5
79cb5ee39c1cc26fd144f34c7c666c7d
-
SHA1
a2ec0a8f9b56c03bffdeda62c7662f1cbdcace76
-
SHA256
57183b0c9c5dfa77e5de2f598edc60fa69e5536d652ec0406ae3ddba9b7d93c1
-
SHA512
30a588d1e127dfe450f0bd3f01cdab4a11093c13c115b4e379235edbece39df2c8e24e362370fcf66e66c79fc73efbd5af11af1b814c5c277602e78ee19cdad7
-
SSDEEP
12288:PDe+yOqUSfICUqoh9pBJ6M+FKp9KhLpMJJ9DhGwUIVet+kERyiJjQdebxSPw:i+TofIC3KBgM+MpimTP
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 57183b0c9c5dfa77e5de2f598edc60fa69e5536d652ec0406ae3ddba9b7d93c1.exe
Files
-
57183b0c9c5dfa77e5de2f598edc60fa69e5536d652ec0406ae3ddba9b7d93c1.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 405KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 569KB - Virtual size: 569KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ