VibrancePlus V4[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
VibrancePlus V4.exe
Size 722KB
Sample261022-vzb6dswt5k
SHA256 27defb51a7da466036637923445e67419bbd1464d15fc342d9ebdd39004351dc
MD5 7b5a279d0686bdcca8ec7a562ac91ab4
SHA1 c79c832b6ea812272a9af76d1bc05637332ed800
SHA512 f4c4d5400f87417e698403117c32d9caff751e1fcb00fac4131f4078473568210de59f28d6bae474824f9f84415783c1c3f060b6f4890890f97ec45eb9069fd7
SSDEEP 12288:G5Cabwu7GxxukqDuwZKYLPF6I1ADTG9s6DjWVXSj0FwH25:lmNknKnKmOFwH25
TLSH
T18CF4398326D70CBADD922B7861EB633AAB34FE708B7A4B2B8518C1315C135D16D6F711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VibrancePlus V4.exe

File Explorer

VibrancePlus V4.exe

.exe 722KB

VibrancePlus V4.exe

IMPHASH be81246ec01faa21b18eba3a3bdbeaa5
SHA256 27defb51a7da466036637923445e67419bbd1464d15fc342d9ebdd39004351dc
MD5 7b5a279d0686bdcca8ec7a562ac91ab4
SHA1 c79c832b6ea812272a9af76d1bc05637332ed800
SHA512 f4c4d5400f87417e698403117c32d9caff751e1fcb00fac4131f4078473568210de59f28d6bae474824f9f84415783c1c3f060b6f4890890f97ec45eb9069fd7
SSDEEP 12288:G5Cabwu7GxxukqDuwZKYLPF6I1ADTG9s6DjWVXSj0FwH25:lmNknKnKmOFwH25
TLSH
T18CF4398326D70CBADD922B7861EB633AAB34FE708B7A4B2B8518C1315C135D16D6F711
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5088

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

gdi32

BitBlt CombineRgn CreateCompatibleBitmap CreateCompatibleDC CreateFontW CreatePen CreateRectRgn CreateRoundRectRgn CreateSolidBrush DeleteDC DeleteObject GetStockObject GetTextExtentPoint32W RestoreDC RoundRect SaveDC SelectClipRgn SelectObject SetBkMode SetTextColor

kernel32

CloseHandle CreateDirectoryW DeleteCriticalSection EnterCriticalSection GetLastError GetModuleHandleW GetPrivateProfileIntW GetPrivateProfileSectionW GetPrivateProfileStringW GetProcAddress GetStartupInfoW GetThreadId InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection LoadLibraryW MultiByteToWideChar RaiseException RtlCaptureContext RtlLookupFunctionEntry RtlUnwindEx RtlVirtualUnwind SetLastError SetUnhandledExceptionFilter Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue TryEnterCriticalSection VirtualProtect VirtualQuery WideCharToMultiByte WritePrivateProfileSectionW WritePrivateProfileStringW

msimg32

GradientFill

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __iob_func __set_app_type __setusermatherr __wgetmainargs __winitenv _amsg_exit _cexit _commode _errno fwprintf _fmode _initterm _onexit _wcmdln _wtoi abort calloc exit fprintf fputc fputs fputwc free fwrite getenv iswctype iswspace localeconv malloc memchr memcmp memcpy memmove memset realloc signal strchr strcmp strerror strlen strncmp strtoul towupper vfprintf wcscpy_s wcslen _read

shell32

SHGetFolderPathW Shell_NotifyIconW

user32

AppendMenuW BeginPaint ClientToScreen CreatePopupMenu CreateWindowExW DefWindowProcW DestroyMenu DestroyWindow DispatchMessageW DrawTextW EndPaint GetClientRect GetCursorPos GetMessageW GetWindowLongPtrW GetWindowRect GetWindowTextW InvalidateRect IsDialogMessageW IsWindow IsWindowVisible LoadCursorW LoadIconW PostQuitMessage PtInRect RegisterClassW ReleaseCapture SetCapture SetFocus SetForegroundWindow SetWindowLongPtrW SetWindowPos SetWindowTextW ShowWindow SystemParametersInfoW TrackPopupMenu TranslateMessage wsprintfW

Name

.text

Size

173KB

Virtual Size

172KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

544B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

19KB

Virtual Size

19KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

12KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

96B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

1024B

Virtual Size

1008B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/19

Size

94KB

Virtual Size

93KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/31

Size

15KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/45

Size

38KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/57

Size

8KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/70

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/81

Size

9KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/97

Size

39KB

Virtual Size

39KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

/113

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

VibrancePlus V4.exe

gdi32

kernel32

msimg32

msvcrt

shell32

user32

generic