Behavioral task
behavioral1
Sample
89f318b441464c56998cc37bf5a40210N.exe
Resource
win7-20240729-en
General
-
Target
89f318b441464c56998cc37bf5a40210N
-
Size
1.4MB
-
MD5
89f318b441464c56998cc37bf5a40210
-
SHA1
66e6b30c0105ee2c96a679b7e61124d347442081
-
SHA256
9ce6686fe2d39567a898a6a2e0905f6839a87cd3cb5ea4189607d2d7c5e8e78f
-
SHA512
11074435b94e5420b7ed99e8fd4cec09be40666259d61cf73d67c4915bf295269d8f18fc7bf2f373e37bbe0e09c0a89bb78f189f34e1c0a0a7cf7ebae695c7c8
-
SSDEEP
24576:Ht8Oop2sz2KL3mw8qS27+Y8653AvHLio0rQaqvYkPM1bcuW6LjS4o6W7X5Hawu:uO42sz2amwvSk53bM1PM1VVlo6Gp6w
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 89f318b441464c56998cc37bf5a40210N
Files
-
89f318b441464c56998cc37bf5a40210N.exe windows:5 windows x86 arch:x86
f34b056292d59c02c013f0976e013a22
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetVersionExA
VirtualAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxW
gdi32
SetTextColor
advapi32
AllocateAndInitializeSid
shell32
ShellExecuteA
ole32
CoUninitialize
oleaut32
SysAllocString
shlwapi
PathFileExistsA
winmm
mciSendCommandA
wsock32
htonl
atl
ord47
comctl32
InitCommonControlsEx
wininet
InternetConnectA
Sections
.text Size: - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ