SecuriteInfo[.]com[.]Win32[.]Malware[.]5758[.]7337[.]dll

General

Target
SecuriteInfo.com.Win32.Malware.5758.7337.dll
Size 5.1MB
Sample231219-mbyeqahdbl
SHA256 00c8dd2a5e3c4dc0de3d339ab9ea329da84d1ec3eb1fff1bdb3b4822849cd652
MD5 a1736f1cc560cb5d0837d5d65e8bc778
SHA1 9f93f5655c34a92ab28f5301e6117cd16fec45da
SHA512 84bb0a8b1fec4528b0e7fc3c64625e2c2941e0542b1184570ff826798c16ba34f258ba8665778ae795e5f2f34c7502a23cb82202344566272b2ffb7b090b9f2e
SSDEEP 49152:75IztkFyczouk1JUVbCZhtv7a+4pycXMDaUfFXjshOR/eSyC:75Ctk6abmtvOS+zhIe
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.Win32.Malware.5758.7337.dll

File Explorer

SecuriteInfo.com.Win32.Malware.5758.7337.dll

.dll 5.1MB

SecuriteInfo.com.Win32.Malware.5758.7337.dll

IMPHASH db4bdde4cc5d0cd4c96736880c453906
SHA256 00c8dd2a5e3c4dc0de3d339ab9ea329da84d1ec3eb1fff1bdb3b4822849cd652
MD5 a1736f1cc560cb5d0837d5d65e8bc778
SHA1 9f93f5655c34a92ab28f5301e6117cd16fec45da
SHA512 84bb0a8b1fec4528b0e7fc3c64625e2c2941e0542b1184570ff826798c16ba34f258ba8665778ae795e5f2f34c7502a23cb82202344566272b2ffb7b090b9f2e
SSDEEP 49152:75IztkFyczouk1JUVbCZhtv7a+4pycXMDaUfFXjshOR/eSyC:75Ctk6abmtvOS+zhIe
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

VMProtect packed file

Detects executables packed with VMProtect commercial packer.

vmprotect
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

170878

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

20KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

4KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp0

Size

112KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.vmp1

Size

40KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

SecuriteInfo.com.Win32.Malware.5758.7337.dll

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

SecuriteInfo.com.Win32.Malware.5758.7337.dll

kernel32

generic