Behavioral task
behavioral1
Sample
2314feab29bd222e77bd2f51af264a62.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2314feab29bd222e77bd2f51af264a62.exe
Resource
win10v2004-20231215-en
General
-
Target
2314feab29bd222e77bd2f51af264a62
-
Size
559KB
-
MD5
2314feab29bd222e77bd2f51af264a62
-
SHA1
5f12a68c31bf8eb7c51876b1225d576f4ab847b3
-
SHA256
fc1f730acb96f0306c7b67ef515d7b89591531745dcb8ca44b5dbafae60db35e
-
SHA512
635425868a98ccb5130d4401a7d507aa8edf83b5beb8f86041b8c52e4f1cc8daf7431005588f5c61c709ba52726598d438511556c906a1e209ca9a9b1a63991b
-
SSDEEP
12288:12iO3FAb2p0KaCu6AEIaBsCogE28bnCCgstCRRxkz+ir05B2TYB/kunqc:fO3WoaduBqlvCCghRxkzL4XkYBtqc
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2314feab29bd222e77bd2f51af264a62
Files
-
2314feab29bd222e77bd2f51af264a62.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 572B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE