VMX5[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

VMX5.exe
Size

4.0MB
MD5

b83cbd81438c89d9faf9b207bc53d129
SHA1

7d1be5d79c4886de41ca809cf739a4d52da163aa
SHA256

2bfeea2086e028a87f5d24846804056f28be7e25b69a5321ca5c3acd6b853b9e
SHA512

e555c7317f2c2ce6134158cbd2feee944d74566df0423b30b89df7ae4a8a29a50b843a179487327342746b7d849d7cf2c3c2152090cefbf6e51389704c3b2693
SSDEEP

98304:sqhjUjBQQFFm3kR9871qI53x9R06Hh0zU:sqhjUjHC3ky1qI53fvu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VMX5.exe

Files

VMX5.exe
.exe windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

hl|ZlhPy
Size: - Virtual size: 5.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pH]qHUE`
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

iWqx^wD[
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE