8174fd03edd20d9b48f598c67697345c

General

Target
8174fd03edd20d9b48f598c67697345c
Size 64KB
Sample240130-ex53pagcf4
SHA256 238f111bcdf1f79344a7ac33f0b95a7b862f40aa8fdbeb8a09a5fecdd151c64e
MD5 8174fd03edd20d9b48f598c67697345c
SHA1 68bf813e2340915f2d16326b4ab996566dc61e83
SHA512 5132ff204d8a3b0d3e01f6fc62a551148a64362bededc5e5a69723867eb66bc54a78bd40a19b2c73d3b7d48cb7a3bdcaa443a3cc0c1cdc60b5677eb0f909ae69
SSDEEP 1536:NCdQnIQOEPNMhU74PPSQxhpKDNjpXJ6PHqrg0lIJS2N:NOaehU7+xiBjnXuS
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8174fd03edd20d9b48f598c67697345c

File Explorer

8174fd03edd20d9b48f598c67697345c

.exe 64KB

8174fd03edd20d9b48f598c67697345c

IMPHASH 5ffae0b78389142c643d33f2d2e20ea8
SHA256 238f111bcdf1f79344a7ac33f0b95a7b862f40aa8fdbeb8a09a5fecdd151c64e
MD5 8174fd03edd20d9b48f598c67697345c
SHA1 68bf813e2340915f2d16326b4ab996566dc61e83
SHA512 5132ff204d8a3b0d3e01f6fc62a551148a64362bededc5e5a69723867eb66bc54a78bd40a19b2c73d3b7d48cb7a3bdcaa443a3cc0c1cdc60b5677eb0f909ae69
SSDEEP 1536:NCdQnIQOEPNMhU74PPSQxhpKDNjpXJ6PHqrg0lIJS2N:NOaehU7+xiBjnXuS
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

VMProtect packed file

Detects executables packed with VMProtect commercial packer.

vmprotect
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

78015

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp0

Size

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp1

Size

56KB

Virtual Size

54KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

152B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

8174fd03edd20d9b48f598c67697345c

kernel32

user32

advapi32

ws2_32

generic

Sharing

General

Malware Config

Signatures

File Explorer

8174fd03edd20d9b48f598c67697345c

kernel32

user32

advapi32

ws2_32

generic