Behavioral task
behavioral1
Sample
Versace.Wtf Perm Unban.exe
Resource
win10v2004-20231215-en
General
-
Target
Versace.Wtf Perm Unban.exe
-
Size
727KB
-
MD5
49ac146430b9073f905575b664433f30
-
SHA1
fffe752b51c1d92f034031a6fb8df528a6af279d
-
SHA256
07c6f5545e6680f243bd35aa19d63ffe92f5e7427561f8100008449c9be9ef51
-
SHA512
1ba9e3c106b126e6744171ac9b36eebc7ae56b0da09c56036861710d28b775a0de08c5653dbd5d4c9c716bcc260f369598fe2dd95655fce77e430848b3c1caaa
-
SSDEEP
12288:MDswjipdJ0hiSJwYdOKEnX8sGCdktrEBh2PwHWxoaGgoYmKBiexS0stC78oPrHI:rYiBrssDCVEB0aaGgo7KB9SrC78oPr
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Versace.Wtf Perm Unban.exe
Files
-
Versace.Wtf Perm Unban.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 725KB - Virtual size: 724KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ