74848220f7cf541552a2a9092aef53c9

General

Target
74848220f7cf541552a2a9092aef53c9
Size 748KB
Sample240125-m3bp2aecc8
SHA256 40cf9b44b70ef2448ff1e05183f2cb345999268ba5ca4338ccca1a9c97acc610
MD5 74848220f7cf541552a2a9092aef53c9
SHA1 154bf9b473e62edd5419a7ec494332bc8777e078
SHA512 51a59da3d6bea3c5146629a4572cc9a8cd956bc9fd46ee97ef1c9eaca8146d113f5f095c8704366306c82ccb5d79d14e6401cf4696cdddb3fe8257ef4efe43b0
SSDEEP 12288:U2OasPC8d2jbi7emRhhY1XrvS9cx4hKxo62R4YJcfvXu28i9kOJ0uU0RP+e:VkdepmRhh+XrvStQe124cH1V0C
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74848220f7cf541552a2a9092aef53c9

File Explorer

74848220f7cf541552a2a9092aef53c9

.exe 748KB

74848220f7cf541552a2a9092aef53c9

IMPHASH f9276cb5be745edf87b65397791bc2b9
SHA256 40cf9b44b70ef2448ff1e05183f2cb345999268ba5ca4338ccca1a9c97acc610
MD5 74848220f7cf541552a2a9092aef53c9
SHA1 154bf9b473e62edd5419a7ec494332bc8777e078
SHA512 51a59da3d6bea3c5146629a4572cc9a8cd956bc9fd46ee97ef1c9eaca8146d113f5f095c8704366306c82ccb5d79d14e6401cf4696cdddb3fe8257ef4efe43b0
SSDEEP 12288:U2OasPC8d2jbi7emRhhY1XrvS9cx4hKxo62R4YJcfvXu28i9kOJ0uU0RP+e:VkdepmRhh+XrvStQe124cH1V0C
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

VMProtect packed file

Detects executables packed with VMProtect commercial packer.

vmprotect
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1560618

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

31KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

49KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp0

Size

4KB

Virtual Size

928B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.vmp1

Size

Virtual Size

701KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp2

Size

736KB

Virtual Size

735KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

4KB

Virtual Size

924B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

74848220f7cf541552a2a9092aef53c9

imm32

kernel32

user32

shell32

generic

Sharing

General

Malware Config

Signatures

File Explorer

74848220f7cf541552a2a9092aef53c9

imm32

kernel32

user32

shell32

generic