Behavioral task
behavioral1
Sample
455a6677ede5b5353314cb69c6fb07234a479745df16ecae0a463e5be0a474fc.exe
Resource
win7-20230831-en
General
-
Target
455a6677ede5b5353314cb69c6fb07234a479745df16ecae0a463e5be0a474fc
-
Size
10.4MB
-
MD5
6dc2f9662ae4d1fef18f7b26209f1fc3
-
SHA1
c7854b410c93cb1d69fc6e4382925cba36ddc10a
-
SHA256
455a6677ede5b5353314cb69c6fb07234a479745df16ecae0a463e5be0a474fc
-
SHA512
b5dd6830d0894d84eb08d4d458b3662b5f237942fdc7623c2f2761a0c76fa68d7bcf61a62a6a939c7f73b0f2f6b3fec9249528d943b8a10bbfaa3c95860881fa
-
SSDEEP
196608:y1ElwBcNBOshBpAxzf2WhORg9IoYHoXenjf4FYzGqt8zoDmT4slpZGZ+/LXqpDKz:xlwsBO2pOf2ng9IoYIXCPzGm8qmTHTkW
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 455a6677ede5b5353314cb69c6fb07234a479745df16ecae0a463e5be0a474fc
Files
-
455a6677ede5b5353314cb69c6fb07234a479745df16ecae0a463e5be0a474fc.exe windows:5 windows x86
5f67b4e4324999d36a3a4bec593b502a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiOutReset
ws2_32
getpeername
kernel32
GetVersionExA
GetVersion
SetStdHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
InflateRect
gdi32
BeginPath
winspool.drv
DocumentPropertiesA
advapi32
RegCloseKey
shell32
Shell_NotifyIconA
ole32
OleInitialize
oleaut32
LoadTypeLi
comctl32
ord17
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 948KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 426KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 8.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 10.4MB - Virtual size: 10.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ