Behavioral task
behavioral1
Sample
71401793893dfd749b36d69fc5abbfbe.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
71401793893dfd749b36d69fc5abbfbe.exe
Resource
win10v2004-20231222-en
General
-
Target
71401793893dfd749b36d69fc5abbfbe
-
Size
246KB
-
MD5
71401793893dfd749b36d69fc5abbfbe
-
SHA1
11b62ee9e53fc76f1d8703e718fd75809f6b4e9c
-
SHA256
c4137108337821dfa1a427a971116dfd0214f39431a2b50ceac14d6d635f831a
-
SHA512
ae39976383ce3ab34a77eb1186dadc7b2c18de074ecc3885eb4b132a25b1c6f4b282f111bd6bbd4244a398c1f4af071866121b8c638b2b5c1a4b10c5caf450be
-
SSDEEP
6144:63udfpwgAmb7OIWrigakdutJmOEhiIl0zPQ:6+dflAEvXkwtJmOEhiJk
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 71401793893dfd749b36d69fc5abbfbe
Files
-
71401793893dfd749b36d69fc5abbfbe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 159KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 243KB - Virtual size: 243KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ