Behavioral task
behavioral1
Sample
7i6oi8Hh8uuu8b688G9h9.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7i6oi8Hh8uuu8b688G9h9.exe
Resource
win10v2004-20240412-en
General
-
Target
7i6oi8Hh8uuu8b688G9h9.exe
-
Size
957KB
-
MD5
1f06a741a85ea28f8f12aa74e7f2d33a
-
SHA1
316f1353a009b1fa320202f7e05f1e7f4674a628
-
SHA256
a4ba8140a70f3d5c83acb7e418d5fe37947e36c603143624d87dbbcfc9e70663
-
SHA512
c102be0c9a50d0e9060a35a620893e7cf3cff564446af912dffb84996588a98dd23f96c00f91b2e44f78b3d465f796d841bd020c2e0bd11a7e83ca8c93a04cc1
-
SSDEEP
12288:VyFZ9WAzXUti5cpoi3fAOlpLxz6zqstYGzBhBl1XgljqR4Z1NwDtkcPP9dd5FKBU:K9ZQs9i3bdxzdOXgejT5zeDoAXUo+Qy
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7i6oi8Hh8uuu8b688G9h9.exe
Files
-
7i6oi8Hh8uuu8b688G9h9.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 951KB - Virtual size: 951KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ