Emulator[.]vmp[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
Emulator.vmp.exe
Size 13.8MB
Sample261003-2p6etazxes
SHA256 048be2ab451d0146e4b16a5b3a81cbc27eedc6138ddb62614ce11698afab475f
MD5 624ef0185042525c242a364e88a16e0f
SHA1 8e09925bf01fad089693b6afb633a65c571f24e3
SHA512 c84822dc08000d66d905420ed3344392bfa90051f9103dc6510f4709ba519e8f511481807896e132e427fca53c3dae6ad46f82947e9ab327ce2aab6f504714a6
SSDEEP 196608:LViKtxuOby0N8T0e8Bxz2kx7MPw9F54FaWJ4qFe2uye7gZIsRT53kK1gdQb:LViKt7by13a7Mo9F54FaWJXFEu95V
TLSH
T102E612D564D411EDC886C670E30D6FFDF1C978990CB9A82B7FC709026B32D52C9A6A36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Emulator.vmp.exe

File Explorer

Emulator.vmp.exe

.exe 13.8MB

Emulator.vmp.exe

IMPHASH 23159a1fb35f4d3e413e17118500e508
SHA256 048be2ab451d0146e4b16a5b3a81cbc27eedc6138ddb62614ce11698afab475f
MD5 624ef0185042525c242a364e88a16e0f
SHA1 8e09925bf01fad089693b6afb633a65c571f24e3
SHA512 c84822dc08000d66d905420ed3344392bfa90051f9103dc6510f4709ba519e8f511481807896e132e427fca53c3dae6ad46f82947e9ab327ce2aab6f504714a6
SSDEEP 196608:LViKtxuOby0N8T0e8Bxz2kx7MPw9F54FaWJ4qFe2uye7gZIsRT53kK1gdQb:LViKt7by13a7Mo9F54FaWJXFEu95V
TLSH
T102E612D564D411EDC886C670E30D6FFDF1C978990CB9A82B7FC709026B32D52C9A6A36
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

10936263

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Name

.text

Size

Virtual Size

559KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

123KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

16KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.hdexp

Size

Virtual Size

32B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.lV`

Size

Virtual Size

8.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.<lF

Size

512B

Virtual Size

448B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.f\D

Size

13.8MB

Virtual Size

13.8MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

469B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

188B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Emulator.vmp.exe

libcrypto-3-x64

bcrypt

crypt32

kernel32

user32

advapi32

shell32

msvcp140

wininet

winhttp

ncrypt

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-locale-l1-1-0

ntdll

generic