vm (original)[.]exe

Resubmissions

15-05-2024 00:17

240515-alezxaff9z 3

15-05-2024 00:15

240515-akebzsgb25 3

Sharing

Copy URL

Twitter E-mail

General

Target

vm (original).exe
Size

35.5MB
MD5

08580fe9458eeee688ec23d5709a3d9d
SHA1

b5b6917cb1665179fbc04545af49ebc801b519f9
SHA256

87c07935ba674fd0ec746249769979daeab47284793d2f7c99b7ecb180809655
SHA512

25644d340a278412705ffc7db9bf66b892ba2c76fc4a50fec87f0737e358db88526df5f2235d6c8852c6552f155a1233ada16ac6720c0e7fdbaefb7fb181238e
SSDEEP

786432:DZbejRG8y/2Tcili8usTPxMa6YNoQvfhkhjtRxlrASEp9kR:Nbem2TcF8ucPxcQwjtzlsSE3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vm (original).exe

Files

vm (original).exe
.exe windows:6 windows x64 arch:x64

62aa8ed7e18a404fec15c880c9e3cb9a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetStdHandle
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

ShowWindow

gdi32

CreateSolidBrush

advapi32

CryptAcquireContextA

shell32

ShellExecuteA

msvcp140

?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A

ntdll

NtQuerySystemInformation

dbghelp

ImageRvaToVa

d3d11

D3D11CreateDeviceAndSwapChain

imm32

ImmSetCompositionWindow

d3dcompiler_43

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

rpcrt4

RpcStringFreeA

psapi

GetModuleInformation

userenv

UnloadUserProfile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_CxxThrowException

api-ms-win-crt-heap-l1-1-0

_callnewh

api-ms-win-crt-math-l1-1-0

ldexp

api-ms-win-crt-string-l1-1-0

ispunct

api-ms-win-crt-runtime-l1-1-0

abort

api-ms-win-crt-stdio-l1-1-0

_set_fmode

api-ms-win-crt-locale-l1-1-0

___lc_codepage_func

api-ms-win-crt-time-l1-1-0

clock

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-convert-l1-1-0

strtod

api-ms-win-crt-filesystem-l1-1-0

_unlock_file

api-ms-win-crt-utility-l1-1-0

rand

ws2_32

WSACleanup

normaliz

IdnToAscii

crypt32

CertOpenStore

wldap32

ord60

Sections

.text
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 245KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.|7A
Size: - Virtual size: 21.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

./YV
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.s2$
Size: 35.5MB - Virtual size: 35.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

62aa8ed7e18a404fec15c880c9e3cb9a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msvcp140

ntdll

dbghelp

d3d11

imm32

d3dcompiler_43

dwmapi

rpcrt4

psapi

userenv

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-utility-l1-1-0

ws2_32

normaliz

crypt32

wldap32

Sections

.text Size: - Virtual size: 1.1MB

.rdata Size: - Virtual size: 245KB

.data Size: - Virtual size: 9KB

.pdata Size: - Virtual size: 48KB

.|7A Size: - Virtual size: 21.3MB

./YV Size: 7KB - Virtual size: 6KB

.s2$ Size: 35.5MB - Virtual size: 35.5MB

.rsrc Size: 512B - Virtual size: 480B

.text
Size: - Virtual size: 1.1MB

.rdata
Size: - Virtual size: 245KB

.data
Size: - Virtual size: 9KB

.pdata
Size: - Virtual size: 48KB

.|7A
Size: - Virtual size: 21.3MB

./YV
Size: 7KB - Virtual size: 6KB

.s2$
Size: 35.5MB - Virtual size: 35.5MB

.rsrc
Size: 512B - Virtual size: 480B