7329e4ae3ec83b3bebc7fdf5fa72709d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7329e4ae3ec83b3bebc7fdf5fa72709d
Size

815KB
MD5

7329e4ae3ec83b3bebc7fdf5fa72709d
SHA1

70f567324de17e735fd7c08d23bc24218b079e50
SHA256

663d28b631a78bb3a146fd0630df5ebdeb7c95fe60e552b96b9abff7a4178a31
SHA512

0d056795e623efbc15a559d8df426fd0c432c8ff38f1f3bf0be51988546a0f090a8439fd70e4b0905ad6259e148e9f277084325d43b9a4d40150dfbb0799078f
SSDEEP

12288:RTEWiZfOHQ5M0MGTgJ19ni5HMSqw08ApWK4Y8C46Cg7wZ:G9xOw5XaJfnysSqw0tH8Y8Z

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

resource	yara_rule
sample	vmprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7329e4ae3ec83b3bebc7fdf5fa72709d

Files

7329e4ae3ec83b3bebc7fdf5fa72709d
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 808KB - Virtual size: 807KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ