Behavioral task
behavioral1
Sample
9d8710c5bcf9cd2e45cb4868b55673b04237a52fb449ae210d2176dc424c1527.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
9d8710c5bcf9cd2e45cb4868b55673b04237a52fb449ae210d2176dc424c1527.exe
Resource
win10v2004-20230915-en
General
-
Target
9d8710c5bcf9cd2e45cb4868b55673b04237a52fb449ae210d2176dc424c1527
-
Size
1.8MB
-
MD5
2140e06f61e0eec09652f950aa1cce27
-
SHA1
5b48c034ad797938cd47a67a14ed676ff9b23927
-
SHA256
9d8710c5bcf9cd2e45cb4868b55673b04237a52fb449ae210d2176dc424c1527
-
SHA512
7d660a0cc9787256a31b372a8352f3a8836166b7080ccac1304049556ced2fff010bf73d42424d48d3e627b61006f28b84e63c94f89e7f95d1281d3c48242441
-
SSDEEP
49152:Sk/i+WuIoa/9OtwbtEtPL+6AHL1f8HxyCgrJG1:1bp20twBE5LQHLCD
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9d8710c5bcf9cd2e45cb4868b55673b04237a52fb449ae210d2176dc424c1527
Files
-
9d8710c5bcf9cd2e45cb4868b55673b04237a52fb449ae210d2176dc424c1527.exe windows:5 windows x64
c5ec03529672ef02d9510b9a66df971a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
crypt32
CertOpenStore
kernel32
GetVersionExA
GetVersionExW
GlobalUnlock
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
SystemParametersInfoW
gdi32
SetWindowExtEx
winspool.drv
ClosePrinter
advapi32
SetThreadToken
shell32
DragQueryFileW
comctl32
InitCommonControlsEx
shlwapi
PathFindExtensionW
ole32
CoTaskMemFree
oleaut32
VariantInit
ws2_32
WSAGetLastError
wldap32
ord167
Sections
.text Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ