Static task
static1
Behavioral task
behavioral1
Sample
133cc1f98b631fc21cb646f837bff9f3bdaea79da6909e9b66a039aaabff631e.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
133cc1f98b631fc21cb646f837bff9f3bdaea79da6909e9b66a039aaabff631e.exe
Resource
win10v2004-20240226-en
General
-
Target
133cc1f98b631fc21cb646f837bff9f3bdaea79da6909e9b66a039aaabff631e.exe
-
Size
2.4MB
-
MD5
b182ec7a917f679f3a909e1e59360a98
-
SHA1
f2444c1dfc9776d6fa3d506f1d4a6f5ac73aec97
-
SHA256
133cc1f98b631fc21cb646f837bff9f3bdaea79da6909e9b66a039aaabff631e
-
SHA512
c6805f252383b0bb673a29b1f3e75b72dd858ccc6911727c0504157f4b00fde8cf4f9f2837fac7193cb25583bfaa3fba843bfb09c103219b3d5ab035f0a895dd
-
SSDEEP
49152:j6QdB/KwPYzNOrOszEbjzgpg7SVdXbgcBYBi:j6QdB/KwyA3q7K0cBYBi
Malware Config
Signatures
-
Detects executables packed with VMProtect. 1 IoCs
resource yara_rule sample INDICATOR_EXE_Packed_VMProtect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 133cc1f98b631fc21cb646f837bff9f3bdaea79da6909e9b66a039aaabff631e.exe
Files
-
133cc1f98b631fc21cb646f837bff9f3bdaea79da6909e9b66a039aaabff631e.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 9KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 16B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: 510KB - Virtual size: 509KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 390KB - Virtual size: 390KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ