84ddc2e657cd04234e636acca0070b5f

Sharing

Copy URL Twitter E-mail

General

Target
84ddc2e657cd04234e636acca0070b5f
Size 92KB
Sample240131-tn9f3sgca2
SHA256 1067b1ee685c708502440b4e8d994b9ca6c5257be81051545e2e571ebcd36696
MD5 84ddc2e657cd04234e636acca0070b5f
SHA1 5bc8cf9a74eaadf450df1e1da89b6283bd21b0a7
SHA512 cac1b04c98f50382de6d851a3bf8f0e8deeeaf507084464e80a9ac7bc9760231d6990d416fee9e66cbf0318af020fc6ed6fd7d92579a6eab1bbc1199d11addef
SSDEEP 1536:7QOnr2Z76JtXnA9wSjbQpMcBsP3maSTKdbVS3Kc+wmJV05sPHUahX6g:HSZGXQ9n+BFa2Kxyc2qP7hq
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84ddc2e657cd04234e636acca0070b5f

File Explorer

84ddc2e657cd04234e636acca0070b5f

.exe 92KB

84ddc2e657cd04234e636acca0070b5f

IMPHASH 95f9fb2ac2ce02aa9939b8b55003390c
SHA256 1067b1ee685c708502440b4e8d994b9ca6c5257be81051545e2e571ebcd36696
MD5 84ddc2e657cd04234e636acca0070b5f
SHA1 5bc8cf9a74eaadf450df1e1da89b6283bd21b0a7
SHA512 cac1b04c98f50382de6d851a3bf8f0e8deeeaf507084464e80a9ac7bc9760231d6990d416fee9e66cbf0318af020fc6ed6fd7d92579a6eab1bbc1199d11addef
SSDEEP 1536:7QOnr2Z76JtXnA9wSjbQpMcBsP3maSTKdbVS3Kc+wmJV05sPHUahX6g:HSZGXQ9n+BFa2Kxyc2qP7hq
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

VMProtect packed file

Detects executables packed with VMProtect commercial packer.

vmprotect
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

120172

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

386B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

Virtual Size

158B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.data

Size

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

8KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp0

Size

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp1

Size

76KB

Virtual Size

75KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

4KB

Virtual Size

72B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

84ddc2e657cd04234e636acca0070b5f

kernel32

generic