Behavioral task
behavioral1
Sample
4K高清壁纸1.5.vmp/4K高清壁纸1.5.vmp.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
4K高清壁纸1.5.vmp/4K高清壁纸1.5.vmp.exe
Resource
win10v2004-20231023-en
General
-
Target
9320c894831e14c72077bc7bbd85da5af8fcb1e2e7b41162b3d9b7f031e7a0d9
-
Size
1.8MB
-
MD5
213d3ebc6630935ff41f0402160f8be5
-
SHA1
97af4d33fbdfbf5c35af20e92620179037f2ad01
-
SHA256
9320c894831e14c72077bc7bbd85da5af8fcb1e2e7b41162b3d9b7f031e7a0d9
-
SHA512
06e77615bef71f74ec21b6370182366ce9482813fdff4ed126ffda1bfb9519869f406613d5b8be4f64f3624369097cdf22767b93c560afa887c0457f9df83c0a
-
SSDEEP
49152:2PbE1+pPMtijsIKJLaQwgG9+T3G1USC5KQvo2J2bdg2MBa:EbE1+pEtlbJLaQwgG9+a1USC5qi2xgJ0
Malware Config
Signatures
-
resource yara_rule static1/unpack001/4K高清壁纸1.5.vmp/4K高清壁纸1.5.vmp.exe vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/4K高清壁纸1.5.vmp/4K高清壁纸1.5.vmp.exe
Files
-
9320c894831e14c72077bc7bbd85da5af8fcb1e2e7b41162b3d9b7f031e7a0d9.zip
-
4K高清壁纸1.5.vmp/4K高清壁纸1.5.vmp.exe.exe windows:5 windows x86
38c99d052e99f3af7798e9f911a70d92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiOutPrepareHeader
ws2_32
accept
kernel32
GetVersionExA
GetVersion
HeapDestroy
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
SetWindowsHookExA
gdi32
ExtTextOutA
winspool.drv
OpenPrinterA
advapi32
RegQueryValueA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
LoadTypeLi
comctl32
ord17
comdlg32
ChooseColorA
Sections
.text Size: - Virtual size: 733KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 885KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
4K高清壁纸1.5.vmp/微信扫码关注公众号:软件共享管家(获取更多软件,教程,素材).jpg