Static task
static1
Behavioral task
behavioral1
Sample
VMX (1).exe
Resource
win10-20240404-en
General
-
Target
VMX (1).exe
-
Size
9.0MB
-
MD5
db86a1b5da2e49d27bf5a5ee68496e18
-
SHA1
5a12c95612c147d609751e2161b34988590e77ff
-
SHA256
9110c01ffb783c87151b2edf7207522896b530e069578e27b114124b818697da
-
SHA512
c42d619dd236689836dcb3089308ab8ea3e1942067ed52bea1425b01660a4ffadf41d9c33fd8ce7d0a7baad4a293955f2d04675645c2b06157c508ed9d7ad615
-
SSDEEP
196608:b5vew+iI2z6EZj/LyRDcU3YQrhfm03MRzlLBQcyLj:b5vC2z6EZ3yZPrhfm03MRzFycyLj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VMX (1).exe
Files
-
VMX (1).exe.exe windows:6 windows x64 arch:x64
8ab901ba830e96ac05a7c5dabade2128
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetCurrentProcessId
user32
EnumDisplayMonitors
gdi32
CreateCompatibleBitmap
advapi32
ConvertSidToStringSidA
ole32
CoCreateInstance
oleaut32
SafeArrayGetUBound
msvcp140
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
dxgi
CreateDXGIFactory
iphlpapi
GetIpNetTable
ws2_32
inet_addr
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
api-ms-win-crt-runtime-l1-1-0
system
api-ms-win-crt-string-l1-1-0
isalnum
api-ms-win-crt-heap-l1-1-0
_set_new_mode
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
api-ms-win-crt-math-l1-1-0
_dsign
api-ms-win-crt-convert-l1-1-0
strtod
api-ms-win-crt-environment-l1-1-0
getenv_s
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
api-ms-win-crt-utility-l1-1-0
srand
api-ms-win-crt-time-l1-1-0
_time64
Sections
.text Size: 377KB - Virtual size: 377KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 430KB - Virtual size: 432KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
GoodLuck Size: 6.2MB - Virtual size: 6.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
GoodLuck Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GoodLuck Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 472B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ