Behavioral task
behavioral1
Sample
ImpulseM.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ImpulseM.exe
Resource
win10-20230915-en
Behavioral task
behavioral3
Sample
ImpulseM.exe
Resource
win10v2004-20230915-en
General
-
Target
ImpulseM.exe
-
Size
8.7MB
-
MD5
d2df193e2afe6226f45fa3b088fb4028
-
SHA1
3478726fcbf6c942fbf33a565942e35c4cba5f0c
-
SHA256
0074b02303c5ff1d31352a5997e6d1d3b8199a3ed08c3b6424b152eecadd0bc2
-
SHA512
8a735c99de09a6c7b014fb730f4eefcf870e60098b98806fc2edbb9d391d2e1d31ebd04e734679bf5f0e49322d368e91281ca4c46a261ea41791aa2625400d6d
-
SSDEEP
196608:GNSP7GJeaGuWRdgx4knhP0KGXUseHWON62pKR6GY+G6GR:W7HmRS0ZjezNE2+5G
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ImpulseM.exe
Files
-
ImpulseM.exe.exe windows x64
77e0760b5ddd7b4f0d67f78b229e6b13
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
opengl32
glGetString
kernel32
GetEnvironmentVariableA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SendMessageW
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
gdi32
SetPixelFormat
advapi32
RegCloseKey
shell32
DragQueryFileW
msvcp140
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
imm32
ImmReleaseContext
d3dx9_43
D3DXVec3Transform
winhttp
WinHttpSendRequest
normaliz
IdnToAscii
wldap32
ord32
crypt32
CertOpenStore
ws2_32
select
rpcrt4
UuidCreate
psapi
GetModuleInformation
userenv
UnloadUserProfile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_terminate
api-ms-win-crt-stdio-l1-1-0
fseek
api-ms-win-crt-runtime-l1-1-0
_resetstkoflw
api-ms-win-crt-math-l1-1-0
atan2f
api-ms-win-crt-time-l1-1-0
_gmtime64
api-ms-win-crt-heap-l1-1-0
free
api-ms-win-crt-string-l1-1-0
strpbrk
api-ms-win-crt-utility-l1-1-0
abs
api-ms-win-crt-convert-l1-1-0
strtoul
api-ms-win-crt-multibyte-l1-1-0
_mbsicmp
api-ms-win-crt-locale-l1-1-0
localeconv
api-ms-win-crt-filesystem-l1-1-0
_fstat64
wtsapi32
WTSSendMessageW
Sections
.text Size: - Virtual size: 1010KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 279KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 734KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 8.6MB - Virtual size: 8.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 212B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ