Static task
static1
Behavioral task
behavioral1
Sample
Injection.vmp.exe
Resource
win10v2004-20240419-en
General
-
Target
Injection.vmp.exe
-
Size
24.3MB
-
MD5
030665b9bc6bb9368bcdc111893e6679
-
SHA1
c6d2e1958a46e85b5d64f335f0fe6c44456f91f4
-
SHA256
ac74dffe88b16fde19b002cfd864c9b77a19569277f1fa55dd2c98377eb70185
-
SHA512
1aa94cc19771c2f4c3936c9321807534f2c514e86dca28b58e581ecbe597ac6322807d7af7d20ce5cce2c86b69b73093573a865984f1c4e28ff9fbe6176af925
-
SSDEEP
393216:olwXPD3qYcjEyJpfuL4TVQ5akN1exrumG4pw5qBPlLmNO31TrLbhZc:+K2X20eakN5mfSkpmNO9nbhZc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource Injection.vmp.exe
Files
-
Injection.vmp.exe.exe windows:6 windows x64 arch:x64
50be5ba3b472afc4a14699a1c8fe1c6a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CreateRemoteThreadEx
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
MessageBoxW
Sections
.text Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
. 7c Size: - Virtual size: 14.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pAn Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hCR Size: 24.3MB - Virtual size: 24.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ