VMDetectorApp[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VMDetectorApp.exe
Size

28KB
MD5

9df50c017a6c8d850b0adf878cc19ed7
SHA1

8b84e6a5ab46914074c6fc8b2e23ef66fe45b26a
SHA256

969ef75dfc8f781782e7269765a88a11186d4cbb7dd30518ea06f56f76211d41
SHA512

4d1c5cb76576cffa6331bbd2779e4c7674bcaa03cfefbba677884a15b50d4e064368d831911becd8f4655a3c820987c0e7b6f52870a2229da7f26de30a8d831e
SSDEEP

768:3dr9gOcClfUYLCw69tYlVz1PpmhyKwipoDKExQ8h4+U:3138oX5tKwvFe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VMDetectorApp.exe

Files

VMDetectorApp.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ