Behavioral task
behavioral1
Sample
1352009c1bbf4374148d150c223063d5f173acf9c31f2c1dc0159f0991128429.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1352009c1bbf4374148d150c223063d5f173acf9c31f2c1dc0159f0991128429.exe
Resource
win10v2004-20231215-en
General
-
Target
1352009c1bbf4374148d150c223063d5f173acf9c31f2c1dc0159f0991128429
-
Size
153KB
-
MD5
8bc8def7be60769cbc6d4b5ca112c83d
-
SHA1
df11d15e33bd168acad39f727d1799e3464fc1ac
-
SHA256
1352009c1bbf4374148d150c223063d5f173acf9c31f2c1dc0159f0991128429
-
SHA512
d1b66b20319c65f38b9b9fcb83d9fb9e9a01d41ebbab02194101f5f5a68e496bbcd70fb6de9216e0fa2a6e1c6c983268f66a1c1e7951969826adf196a93e6da0
-
SSDEEP
3072:pnNeeyb9NqYNGoAqXP5gKyFWdBEncCRgXkfvpTylBKdmEJZ:6JN2oAqf6g8nrgUnpqBKdmQ
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1352009c1bbf4374148d150c223063d5f173acf9c31f2c1dc0159f0991128429
Files
-
1352009c1bbf4374148d150c223063d5f173acf9c31f2c1dc0159f0991128429.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 498KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 5.2MB - Virtual size: 5.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ