Static task
static1
Behavioral task
behavioral1
Sample
vm-detect_WINDOWS.exe
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
vm-detect_WINDOWS.exe
Resource
win7-20240705-en
Behavioral task
behavioral3
Sample
vm-detect_WINDOWS.exe
Resource
win10v2004-20240802-en
Behavioral task
behavioral4
Sample
vm-detect_WINDOWS.exe
Resource
win11-20240802-en
General
-
Target
vm-detect_WINDOWS.exe
-
Size
2KB
-
MD5
cce3a802e229c1a12542c15f824effd7
-
SHA1
8836415ed91389e38b7c94172354dc9c9c5049a9
-
SHA256
9bceb2f8823eb1c2946ca0d5575256cb859a136972a1b9d4d98a4e299bbbd4e4
-
SHA512
918ee13f5166eac7efbfaceaff975882c19664b6e6b26e212329b7ad692610749412543fa634d159cdad7b41c4d0fa5e3fbb17d5686547cf5ac1e6103abf9c04
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource vm-detect_WINDOWS.exe
Files
-
vm-detect_WINDOWS.exe.exe windows:4 windows x86 arch:x86
7d97316cfdc814ab622aee982927842d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
WriteFile
ExitProcess
Sections
.text Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ