General
-
Target
Asterion (ASTERION v2.1.1).exe
-
Size
1.9MB
-
MD5
725411cbe72cd2c2fbe1f693a4f0f7da
-
SHA1
b136b76a49f67d9506b20e59c7665a93170a1a37
-
SHA256
516f8cd3d6977593aef3b90e61239daac296bc6e2d46a3447e00c47be1061ab0
-
SHA512
527d07fb64ac1d9d7c42c5e2bcb70f67f60e3cb5d25a258b7dda696fd23bb0d3d42724d0fe75e58ea163b6ff8203b9253d881efd50c3bc37c0076d828f931b3c
-
SSDEEP
49152:Zxxk8V2dPybAXQJFPJkSJQbZ8bfJx8i/llwda8OpO6AIEhPGEDnVR:dk8sV6AXEmZ2fJqidl84MnBp
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Asterion (ASTERION v2.1.1).exe
Files
-
Asterion (ASTERION v2.1.1).exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: - Virtual size: 927KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ