vgc_dump.deobf.exe.zip
- SHA256 a2c8e4fc34b3929a86e5806277e7fd37d782256af1ec99605cda5d61ee328d38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
vgc_dump.deobf.exe
Resource
win10ltsc2021-20260513-en
windows10-ltsc_2021-x64
7 signatures
900 seconds
Behavioral task
behavioral2
Sample
vgc_dump.deobf.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
0 signatures
900 seconds
General
- Target vgc_dump.deobf.exe.zip
- Size 45.3MB
- Sample260810-3bkrmawvbx
- SHA256 a2c8e4fc34b3929a86e5806277e7fd37d782256af1ec99605cda5d61ee328d38
- MD5 f6ab78ae75cb6c91b20cfe6ca0d18926
- SHA1 eb1c5990d5502745e171a3bc3ad0e47616b101e4
- SHA512 5aa93000b0b3c7df76f423167f2cb2f38a70bb3f07c2367eb4cbb5367e9a45a1d34e74a3976682aa7014018a71fa56e442b3a358c075fceba9e942b87a35e48a
- SSDEEP 786432:VyYpNIp4KlZiKNEXl3W2KQeJvhyb9+j4mfDIcAUPKv3gkcGUVT9f7llk5zb33EDD:VyYpNY4KPR+XxLovhyR+8m8cAUPKYk0D
- TLSH T1E3A73389145EBF620656F22EF3FBF2B1F53C8BD9F02954AA03591025620EDC76F36252
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/vgc_dump.deobf.exe
File Explorer
-
vgc_dump.deobf.exe.zip.zip 45.3MB
-
vgc_dump.deobf.exe.exe 87.5MB
vgc_dump.deobf.exe
- SHA256 2b48f5a538df450b0c5952f4b4e932d155e265806e730dff8fc86381092250de
- MD5 4bd21acaa2e87f071914eb853f197260
- SHA1 26cb7bdb069c5501cf2d3b725563b0e6b8cbf907
- SHA512 85fd08dc4ed39595490ab5ece768cd870849b115a98138232278f6cdf5dee83023032fe8e81b7990a3834391a5a8385b6a108887285e3899226055c866557113
- SSDEEP 393216:Uc9lBOEQ6WImRbmzFdTXOrrR5XrcMtKG4V+chrdXjduYTnvPc9uvBxDFk:UqmRG7r6rROM4G4V+wpXhuYTnnc9sX
- TLSH T1DE180863EAF3C3D0C09AF97EC37DF223EA217A0DDA35B3AE5F5695022179241A164711
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
0
Entry point
%!f(<nil>)
Magic Number
Subsystem
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
Name
,
Size
81.2MB
Virtual Size
1.5MB
Characteristics
Name
Size
87.5MB
Virtual Size
6B
Characteristics
Name
�
Size
4KB
Virtual Size
1024KB
Characteristics
IMAGE_SCN_CNT_CODE
Name
� @
Size
79.6MB
Virtual Size
5.8MB
Characteristics
Name
Size
Virtual Size
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
Name
.text
Size
4.3MB
Virtual Size
4.3MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
1.2MB
Virtual Size
1.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
96KB
Virtual Size
93KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
172KB
Virtual Size
171KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
4KB
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
generic
count=210, id=261, version=33145,
count=26, id=260, version=33145,
count=11, id=259, version=33145,
count=7, id=253, version=35207,
count=19, id=260, version=35207,
count=12, id=259, version=35207,
count=102, id=261, version=35207,
count=4, id=261, version=35225,
count=1, id=262, version=33145,
count=31, id=257, version=33145,
count=407, id=1, productName=Unmarked objects,
count=1, id=260, version=35222,
count=1, id=259, version=24234,
count=41, id=261, version=33135,
count=1, id=259, version=33135,
count=6, id=260, version=33135,
count=32, productName=Unmarked objects (old),
count=762, id=260, version=30153,
count=119, id=260, version=34120,
count=23, id=261, version=34120,
count=52, id=260, version=33523,
count=37, id=265, version=35225,
count=1, id=259, version=35225,
count=1, id=255, version=35225,
count=1, id=151,
count=1, id=258, version=35225,