94c4e45924e18c418bfaa2c3492b6793

General

Target
94c4e45924e18c418bfaa2c3492b6793
Size 47KB
Sample240206-r2h5yahcf4
SHA256 e864ff23e4cbd45f3e7e584d7d1df65a9d706b5128db6e18958aa3b455d72fa4
MD5 94c4e45924e18c418bfaa2c3492b6793
SHA1 e18ad4fed6df348a6946530c7557ee0200c0dccd
SHA512 c7f1020cfa7f6d3c910c6ce0581905d5a55a1e3b9aa48279fa412205ffe0412f7515bb3c5aa3b3f14431912a2151e5230fff74f4470239b9e51db6dd87e8a21a
SSDEEP 768:llO6iwWMG65YuwSDVhoIiyrhD6cotUjaLNQUtzA/2Fcas/9C19NOrKIQOkN:lsOj5dBeQB6coluGns01GrK20
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94c4e45924e18c418bfaa2c3492b6793

File Explorer

94c4e45924e18c418bfaa2c3492b6793

.exe 47KB

94c4e45924e18c418bfaa2c3492b6793

IMPHASH 0114df69c81dc15abb76b0c57767af05
SHA256 e864ff23e4cbd45f3e7e584d7d1df65a9d706b5128db6e18958aa3b455d72fa4
MD5 94c4e45924e18c418bfaa2c3492b6793
SHA1 e18ad4fed6df348a6946530c7557ee0200c0dccd
SHA512 c7f1020cfa7f6d3c910c6ce0581905d5a55a1e3b9aa48279fa412205ffe0412f7515bb3c5aa3b3f14431912a2151e5230fff74f4470239b9e51db6dd87e8a21a
SSDEEP 768:llO6iwWMG65YuwSDVhoIiyrhD6cotUjaLNQUtzA/2Fcas/9C19NOrKIQOkN:lsOj5dBeQB6coluGns01GrK20
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

VMProtect packed file

Detects executables packed with VMProtect commercial packer.

vmprotect
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

72353

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

Name

.text

Size

Virtual Size

232B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

546B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp0

Size

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.vmp1

Size

45KB

Virtual Size

45KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

68B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

94c4e45924e18c418bfaa2c3492b6793

kernel32

user32

generic

Sharing

General

Malware Config

Signatures

File Explorer

94c4e45924e18c418bfaa2c3492b6793

kernel32

user32

generic