044463b5ac371ea0d5b6eb381204edd9a15f7c692ac187e4b7a4b9145f693693

Analysis

max time kernel
118s
max time network
122s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09/03/2024, 20:32

Target

044463b5ac371ea0d5b6eb381204edd9a15f7c692ac187e4b7a4b9145f693693.exe
Size

573KB
MD5

51c8ead9e6b5e794e37bca5ac5439ada
SHA1

be1ad69b2229e138a2b8c70265102e6c0efe5432
SHA256

044463b5ac371ea0d5b6eb381204edd9a15f7c692ac187e4b7a4b9145f693693
SHA512

703789693585b2cf6ff4b1c0c07ebebbc869c0e500735fa393238c6fc9f240c02ca9cad03dda3d84df67b2b7bfb50a2d0e30b05946c4c1740bc36724bde168c1
SSDEEP

12288:Z3C9+sg6nmF6EO0nx55NbgPK5dp2xkmK54bkB+m3cotRWfLJS:ZqgnF6EO0nx6S5dp2xkfykYGcotglS

Score

9^/10

Detects executables packed with VMProtect. 3 IoCs

resource	yara_rule
behavioral1/memory/300-0-0x0000000000400000-0x0000000000565000-memory.dmp	INDICATOR_EXE_Packed_VMProtect
behavioral1/memory/300-1-0x0000000000400000-0x0000000000565000-memory.dmp	INDICATOR_EXE_Packed_VMProtect
behavioral1/memory/300-4-0x0000000000400000-0x0000000000565000-memory.dmp	INDICATOR_EXE_Packed_VMProtect

C:\Users\Admin\AppData\Local\Temp\044463b5ac371ea0d5b6eb381204edd9a15f7c692ac187e4b7a4b9145f693693.exe
"C:\Users\Admin\AppData\Local\Temp\044463b5ac371ea0d5b6eb381204edd9a15f7c692ac187e4b7a4b9145f693693.exe"
1⤵
PID:300

memory/300-0-0x0000000000400000-0x0000000000565000-memory.dmp

Filesize
1.4MB

Download
memory/300-1-0x0000000000400000-0x0000000000565000-memory.dmp

Filesize
1.4MB

Download
memory/300-3-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/300-4-0x0000000000400000-0x0000000000565000-memory.dmp

Filesize
1.4MB

Download
memory/300-5-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download