Static task
static1
Behavioral task
behavioral1
Sample
VPS_VLR.zip.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
VPS_VLR.zip.exe
Resource
win10v2004-20240508-en
General
-
Target
VPS_VLR.zip.exe
-
Size
363KB
-
MD5
d8fd225ba8dcde0ceddcfdeb339c3115
-
SHA1
cf1b7913c46e103814203b610083f1f84e195578
-
SHA256
de5afd4624c9f6dbeae0c9a1e0d78ccf81636fff185ffe5723411203152cedf6
-
SHA512
1f4a5fc40bbae8f1a72e5ae29d47e29a0e2421f3fe09409f8592b20a5ee04a9f42dd63a962d31df507a9e984c2f8b583bf520541af537cb3b49afe32f7135fe4
-
SSDEEP
6144:OhCQCmFx+qeaHZ2qqDL6IupEA82QEcaTgTA1ZtXYF6I7n:OYuwcZzqn6XpEwQEcGYIQn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VPS_VLR.zip.exe
Files
-
VPS_VLR.zip.exe.exe windows:4 windows x86 arch:x86
a42375408bb22bf5c9988c6147e4c0c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
SetEndOfFile
InterlockedExchange
RtlUnwind
GetOEMCP
GetACP
LoadLibraryA
GetCPInfo
GetLocaleInfoA
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
VirtualQuery
GetSystemInfo
VirtualProtect
GetTimeZoneInformation
HeapSize
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
LCMapStringW
LCMapStringA
CompareStringW
WideCharToMultiByte
GetStringTypeA
GetDriveTypeA
GetCurrentDirectoryA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetStdHandle
SetHandleCount
GetFileType
SetStdHandle
ReadFile
FlushFileBuffers
WriteFile
MultiByteToWideChar
GetVersionExA
GetCommandLineA
GetStartupInfoA
lstrcmpW
CreateSemaphoreW
WaitForSingleObject
CreateThread
ReleaseSemaphore
GetFileAttributesW
FreeLibrary
GetVersionExW
LoadLibraryW
GetProcAddress
IsDBCSLeadByteEx
lstrcpyW
MulDiv
CreateFileW
CloseHandle
GetLastError
DeleteFileW
lstrcmpiW
FormatMessageW
GetCommandLineW
GetSystemTimeAsFileTime
CreateDirectoryW
GetFullPathNameW
GetProcessHeap
HeapFree
lstrcatW
GetStringTypeW
GetCurrentDirectoryW
HeapAlloc
FindFirstFileW
GetDriveTypeW
FileTimeToLocalFileTime
ExitProcess
GetModuleHandleA
TerminateProcess
GetCurrentProcess
SetFilePointer
FindClose
FileTimeToSystemTime
SetEnvironmentVariableA
user32
SetFocus
SetWindowPos
SendDlgItemMessageW
DialogBoxParamW
SetWindowTextW
GetParent
KillTimer
IsDlgButtonChecked
CheckDlgButton
SetForegroundWindow
LoadIconW
EndDialog
SetTimer
GetDlgItem
SendMessageW
GetFocus
GetClientRect
GetDC
ReleaseDC
CallWindowProcA
SetCaretPos
DestroyCaret
CreateCaret
GetSystemMetrics
GetWindow
IsWindowEnabled
ShowCaret
FillRect
GetKeyState
GetKeyboardLayout
SetWindowLongW
GetSysColor
SystemParametersInfoW
GetWindowTextW
GetWindowLongW
CallWindowProcW
IsWindowVisible
BeginPaint
DrawIcon
EndPaint
InvalidateRect
LoadStringW
CharNextW
MessageBoxW
RegisterClassW
CreateWindowExW
ShowWindow
UpdateWindow
DefWindowProcW
GetWindowRect
gdi32
DeleteDC
GetTextMetricsW
CreateCompatibleDC
TranslateCharsetInfo
CreateCompatibleBitmap
GetStockObject
GetDeviceCaps
GetTextExtentPoint32W
BitBlt
DeleteObject
CreateSolidBrush
CreatePen
CreateFontIndirectW
SelectObject
SetTextColor
SetBkColor
Rectangle
ExtTextOutW
GetObjectW
comdlg32
CommDlgExtendedError
GetSaveFileNameW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
shell32
SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW
CommandLineToArgvW
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ