Behavioral task
behavioral1
Sample
557372341d277affabd86b6ab2bb1961.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
557372341d277affabd86b6ab2bb1961.exe
Resource
win10v2004-20231215-en
General
-
Target
557372341d277affabd86b6ab2bb1961
-
Size
1.9MB
-
MD5
557372341d277affabd86b6ab2bb1961
-
SHA1
411c933e533ceac27f162a5534cff795b2c623a3
-
SHA256
e6b2faeea167f5b4a97289edb196de4553cea6a5a561b772c687f6dc1e7b85a0
-
SHA512
05c574355808427748fa11765f6fa20c5953c260dd8703097e038b91a525fe51c3e33b82a7e5f183caf90be4e012f363f3df1f34d34643d1da4ebdaaceafdd58
-
SSDEEP
49152:9/syMT+GCl8q+3hpb/52gSCQEgKEaRwYbOrQI0:haT+5l0hp7JQPyAN
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 557372341d277affabd86b6ab2bb1961
Files
-
557372341d277affabd86b6ab2bb1961.exe windows:4 windows x86 arch:x86
7a3a92818d1a0f2ede31a7e118adf5b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasGetConnectStatusA
kernel32
lstrcmpiA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetCapture
gdi32
GetStretchBltMode
winmm
waveOutPrepareHeader
msimg32
GradientFill
winspool.drv
DocumentPropertiesA
advapi32
RegSetValueExA
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromString
oleaut32
UnRegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
inet_ntoa
wininet
InternetConnectA
comdlg32
GetOpenFileNameA
Sections
.text Size: - Virtual size: 655KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 315KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 410KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.vmp1 Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE