Behavioral task
behavioral1
Sample
0d4644b8a8a9cf27558b17956daf1203d5b7ac127fb32f57401d2018772670e3.exe
Resource
win7-20240611-en
General
-
Target
0d4644b8a8a9cf27558b17956daf1203d5b7ac127fb32f57401d2018772670e3
-
Size
11.6MB
-
MD5
d55925eb358d4dac8a9f8017b83a2e8e
-
SHA1
ba7060cc07fdfa1f7bde839b204a4f299f3ce3d1
-
SHA256
0d4644b8a8a9cf27558b17956daf1203d5b7ac127fb32f57401d2018772670e3
-
SHA512
b5159827afeef03bc332ce7b096992a50d70713ed04e4d4c0f9bcbd5769bc7b728004b111a57c7420b9147a8004a75fe3b53bf8d53a820e2f5f1ef957cd34e8a
-
SSDEEP
196608:0AP945QS8a96IPqc72Mjn4C+xtOWbLlZnnKyJqO0JepPazDZ8sTQ:0AMQSvRx2WnWZKyaJe0DZ8h
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d4644b8a8a9cf27558b17956daf1203d5b7ac127fb32f57401d2018772670e3
Files
-
0d4644b8a8a9cf27558b17956daf1203d5b7ac127fb32f57401d2018772670e3.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 469KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 5.1MB - Virtual size: 5.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.enigma1 Size: 6.2MB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.enigma2 Size: 260KB - Virtual size: 260KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE