Static task
static1
Behavioral task
behavioral1
Sample
VSO PhotoDVD 4.0.0.37 __ KeyGen _.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VSO PhotoDVD 4.0.0.37 __ KeyGen _.exe
Resource
win10v2004-20231215-en
General
-
Target
0b82fd663ec5f2b46d278da4b8879d15
-
Size
85KB
-
MD5
0b82fd663ec5f2b46d278da4b8879d15
-
SHA1
f047a2ef6e2e99ee4c434b76ff30ed73da7db8b9
-
SHA256
e594f6efbcdfcfe58a0cb66f6a2060f6329d8d004e331c7812cfdd29f47374dd
-
SHA512
3ebd5c5656cd837dea36034338261a0ed3b82f03860d562b1ff4f464be0d1c5e6578857ae0deedabcb64b0d9da555729cc70f23619ef5af1e2cf4525d557fdf1
-
SSDEEP
1536:FCIHFd2Oe2rkviiJSS7ttkVdEOkBQZsJSS7ttkn:0IldA+kttyd0B0Lkttw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/VSO PhotoDVD 4.0.0.37 __ KeyGen _.exe
Files
-
0b82fd663ec5f2b46d278da4b8879d15.rar
-
VSO PhotoDVD 4.0.0.37 __ KeyGen _.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 179B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ