Behavioral task
behavioral1
Sample
83f2c7548cc157873239cac7b91ff766ed94018bdc2b5e4adeb975da7a496916.exe
Resource
win7-20240903-en
General
-
Target
83f2c7548cc157873239cac7b91ff766ed94018bdc2b5e4adeb975da7a496916
-
Size
14.8MB
-
MD5
f474f954bec50805ffe4061ff6ab310a
-
SHA1
4ce8b2726bb80e0e11252f08bf5f6e29f0a9b97b
-
SHA256
83f2c7548cc157873239cac7b91ff766ed94018bdc2b5e4adeb975da7a496916
-
SHA512
604864237417e6138ac9b58772ace76e180c5c97e65d13f2a0570f75f91a06c2364f21ce1ff523e656b136fbed4f2391ec8e22b285a21df23f67f9ad4daf8742
-
SSDEEP
393216:UdTIM/F+ZMMzYSii230en0dHL6rvMNtPjzl5BHPGwBsHGq:UVIM/7MzYSBLe0dr6wbnBvGguG
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83f2c7548cc157873239cac7b91ff766ed94018bdc2b5e4adeb975da7a496916
Files
-
83f2c7548cc157873239cac7b91ff766ed94018bdc2b5e4adeb975da7a496916.exe windows:5 windows x86 arch:x86
54dcaca1e3f7a4af426878d00e99215b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsAlloc
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
crypt32
CryptBinaryToStringA
user32
GetScrollPos
rasapi32
RasHangUpA
iphlpapi
GetAdaptersInfo
winmm
mciSendCommandA
ws2_32
accept
version
VerQueryValueA
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
rpcrt4
UuidToStringA
gdi32
GetNearestPaletteIndex
msimg32
GradientFill
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegQueryValueA
shell32
DragAcceptFiles
ole32
StgCreateDocfileOnILockBytes
oleaut32
VariantCopyInd
odbc32
ord20
comctl32
ImageList_EndDrag
oledlg
ord8
wininet
InternetSetOptionA
wldap32
ord29
Sections
.text Size: - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 12.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 753KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 14.8MB - Virtual size: 14.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ