Behavioral task
behavioral1
Sample
26f022983fbe89fd19f19c110c56fb30.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
26f022983fbe89fd19f19c110c56fb30.exe
Resource
win10v2004-20231023-en
General
-
Target
26f022983fbe89fd19f19c110c56fb30.exe
-
Size
2.8MB
-
MD5
26f022983fbe89fd19f19c110c56fb30
-
SHA1
11657da06b7d3b9a1b87068ca0acceb4d063a704
-
SHA256
54f0319acbc5818a0a216bc2a0422dcb49ed72b56859894421f4f779b45ea73b
-
SHA512
b6481a6858204539ce6afe5b298ff5f92be7ec6aae407e26bbb050556c74f75c082a5f9b89d015069edad242d54c749435713af324b7375db8412a238cc38f36
-
SSDEEP
49152:7SE4v4HIlB/+FiKlJFLyaFjFCyzPIADJ8cKoeKAVUS5yNb:WAo3WFdXLHJ7zQADJ1KoOy
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 26f022983fbe89fd19f19c110c56fb30.exe
Files
-
26f022983fbe89fd19f19c110c56fb30.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 649KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 464KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 329KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.vmp1 Size: 952KB - Virtual size: 949KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE