SecuriteInfo[.]com[.]PUA[.]VMProtect[.]21535[.]4647[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.PUA.VMProtect.21535.4647.exe
Size

45.5MB
MD5

7885f0f78067240ee2f5961971420f72
SHA1

d65f195e459c7d7cc846fa61da27dbfedf4ccfe7
SHA256

29193507936ab5c1725b4c581439ba97a651da59621dcfa0af368bbf2a74d3da
SHA512

856035966fe1cacd61fb1899acef513418bf5d5cbc9a0b1b8d34567657d1ef718dabb818e98e85806b10291653a246be1d08cef412579916134a2fcea668bafb
SSDEEP

786432:FEsBylMWc65hrk4X6xZY/asUvQJM4AELIRfwVuEmvKdtV04p/iZB:P0/5hQbm8v0L4f1BiV044B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.PUA.VMProtect.21535.4647.exe

Files

SecuriteInfo.com.PUA.VMProtect.21535.4647.exe
.exe windows:6 windows x64 arch:x64

6c1960ec00c28295e36e8c5469d689d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

QueryPerformanceFrequency
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 548KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bols0
Size: - Virtual size: 28.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bols1
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bols2
Size: 45.5MB - Virtual size: 45.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ