AJ Premium Proxy V12[.]9 Login Fix[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

AJ Premium Proxy V12.9 Login Fix.exe
Size

10.4MB
MD5

91482611673dd21669e8ba4b5d65d28c
SHA1

f2e33c031dbf9cfc7d943f4df13c7775c7a07ea0
SHA256

6ff2c92ff1580cd0a77ffaff02ec7ff4ef75d37a7892d8ef29dd31ef751e7c7e
SHA512

e8d2147912d024c38a43fd5d22e7b4081964222b8430ba9653dcea53a975418674faca266692b8932fb970774d4263896b2012ab19383a370bd1ebcdc0730819
SSDEEP

196608:08/eL8Viy3Ua68ueL4pPtXO3zP93Z1wpqj2bO9fC5lt+/DoFIYIKWWL9Wf1:Ksiy3v6jc4DO3bJqqj/uyro3R9Wf1

Score

7^/10

vmprotect

Malware Config

Signatures

VMProtect packed file 1 IoCs

Detects executables packed with VMProtect commercial packer.

vmprotect

resource	yara_rule
sample	vmprotect

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AJ Premium Proxy V12.9 Login Fix.exe

Files

AJ Premium Proxy V12.9 Login Fix.exe
.exe windows:6 windows x64 arch:x64

80e91c4f92d236706da9b16900b64c39

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

CryptEncrypt

msvcp140

??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ

ws2_32

send

crypt32

CertFreeCertificateChain

winmm

timeEndPeriod

user32

MessageBoxA
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW

kernel32

GetSystemTimeAsFileTime
FlsSetValue
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress

urlmon

URLDownloadToFileW

normaliz

IdnToAscii

wldap32

ord46

shell32

ShellExecuteA

rpcrt4

UuidToStringA

psapi

GetModuleInformation

userenv

UnloadUserProfile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_terminate

api-ms-win-crt-runtime-l1-1-0

__p___argv

api-ms-win-crt-heap-l1-1-0

_callnewh

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-convert-l1-1-0

strtod

api-ms-win-crt-stdio-l1-1-0

_set_fmode

api-ms-win-crt-string-l1-1-0

_stricmp

api-ms-win-crt-filesystem-l1-1-0

_fstat64

api-ms-win-crt-environment-l1-1-0

_dupenv_s

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-time-l1-1-0

strftime

api-ms-win-crt-math-l1-1-0

__setusermatherr

wtsapi32

WTSSendMessageW

Sections

.text
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 369KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 277KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: - Virtual size: 10.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.vmp1
Size: 10.0MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 212B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 423KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

80e91c4f92d236706da9b16900b64c39

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

msvcp140

ws2_32

crypt32

winmm

user32

kernel32

urlmon

normaliz

wldap32

shell32

rpcrt4

psapi

userenv

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

wtsapi32

Sections

.text Size: - Virtual size: 1.7MB

.rdata Size: - Virtual size: 369KB

.data Size: - Virtual size: 277KB

.pdata Size: - Virtual size: 68KB

.vmp0 Size: - Virtual size: 10.0MB

.vmp1 Size: 10.0MB - Virtual size: 10.0MB

.reloc Size: 512B - Virtual size: 212B

.rsrc Size: 423KB - Virtual size: 423KB

.text
Size: - Virtual size: 1.7MB

.rdata
Size: - Virtual size: 369KB

.data
Size: - Virtual size: 277KB

.pdata
Size: - Virtual size: 68KB

.vmp0
Size: - Virtual size: 10.0MB

.vmp1
Size: 10.0MB - Virtual size: 10.0MB

.reloc
Size: 512B - Virtual size: 212B

.rsrc
Size: 423KB - Virtual size: 423KB