40b2d7a36450f08a317428c52dc84ae3[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

40b2d7a36450f08a317428c52dc84ae3.exe
Size

1.3MB
MD5

40b2d7a36450f08a317428c52dc84ae3
SHA1

23a325537a84ed0811b04d6f8124284099672283
SHA256

95162c88c4514933e17cb2e8c95ca272b80d38c87992aa5af712901a2af965cf
SHA512

87b1674ba12ee3a0380ddf15b951d3a6474771f30f75dc1b4d990666d9cf5091521e9c625f4fe63839e097c48f54450b568c551f27acd39774bbf99fe4348a11
SSDEEP

24576:3GJ6zJsOwub4tmwptIZSntlhhz58JjAgRB5pIGKCtbUhIFq:33z+fu8HmZStlhhz5O5Pehx

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40b2d7a36450f08a317428c52dc84ae3.exe

Files

40b2d7a36450f08a317428c52dc84ae3.exe
.exe windows:5 windows x86

2516276a48e23fdde9f34f272f33831a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutReset

ws2_32

closesocket

rasapi32

RasGetConnectStatusA

kernel32

WriteFile
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

GetWindowPlacement

gdi32

GetBkMode

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

OleUninitialize

oleaut32

RegisterTypeLi

comctl32

ImageList_Destroy

wininet

HttpOpenRequestA

comdlg32

GetSaveFileNameA

Sections

.text
Size: - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp0
Size: - Virtual size: 785KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vmp1
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2516276a48e23fdde9f34f272f33831a

Headers

File Characteristics

Imports

winmm

ws2_32

rasapi32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

wininet

comdlg32

Sections

.text Size: - Virtual size: 620KB

.rdata Size: - Virtual size: 227KB

.data Size: - Virtual size: 330KB

.vmp0 Size: - Virtual size: 785KB

.vmp1 Size: 1.3MB - Virtual size: 1.3MB

.rsrc Size: 20KB - Virtual size: 18KB

.text
Size: - Virtual size: 620KB

.rdata
Size: - Virtual size: 227KB

.data
Size: - Virtual size: 330KB

.vmp0
Size: - Virtual size: 785KB

.vmp1
Size: 1.3MB - Virtual size: 1.3MB

.rsrc
Size: 20KB - Virtual size: 18KB