vmp3-import-fix[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
vmp3-import-fix.exe
Size 4.5MB
Sample261027-dakb2a1sgv
SHA256 388648d284cb047d557474762cbc96bc1534bd467781d48c1272ae1be2e043c6
MD5 432e493fc10a275fff8a86eedbbf08e7
SHA1 1299ae8294993c99abef5e9d194871b2fc542209
SHA512 4776aac555a6b762470bd65519786f175b2bf6d3b10f418d871c2f01b30bfe3f7ee14394e0b3ecfb68951c1cef44920ba1f85cddc5b63665b8aeba1409717af3
SSDEEP 98304:XQvEkj++OabLnNyWx8w1pzmRCtuuqXQTK:dkj6SNpF/tQ
TLSH
T19926AE32F5028017E5D10072EBBE5F7B1A6E6735433A90DB128459B49B64BC27E32F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
vmp3-import-fix.exe

File Explorer

vmp3-import-fix.exe

.exe 4.5MB

vmp3-import-fix.exe

IMPHASH bafcccfb4176f61c6e0af227d1dfa9ce
SHA256 388648d284cb047d557474762cbc96bc1534bd467781d48c1272ae1be2e043c6
MD5 432e493fc10a275fff8a86eedbbf08e7
SHA1 1299ae8294993c99abef5e9d194871b2fc542209
SHA512 4776aac555a6b762470bd65519786f175b2bf6d3b10f418d871c2f01b30bfe3f7ee14394e0b3ecfb68951c1cef44920ba1f85cddc5b63665b8aeba1409717af3
SSDEEP 98304:XQvEkj++OabLnNyWx8w1pzmRCtuuqXQTK:dkj6SNpF/tQ
TLSH
T19926AE32F5028017E5D10072EBBE5F7B1A6E6735433A90DB128459B49B64BC27E32F6B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3452722

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Project\vmp3-import-fix\Release\vmp3-import-fix.pdb

ole32

CoCreateInstance CoUninitialize CoInitialize

kernel32

InitializeCriticalSectionEx CreateFileW GetCurrentThreadId GetLastError CloseHandle RaiseException DecodePointer DeleteCriticalSection GetCurrentProcess ReadFile SetEndOfFile CreateFileMappingW MapViewOfFile GetFileSizeEx WriteProcessMemory K32GetModuleFileNameExW OpenProcess CreateToolhelp32Snapshot VirtualProtectEx ReadProcessMemory K32EnumProcessModules K32GetMappedFileNameW MultiByteToWideChar WideCharToMultiByte GetConsoleScreenBufferInfo SetConsoleTextAttribute GetStdHandle WriteConsoleA GetDynamicTimeZoneInformation Sleep GetConsoleMode GetFileAttributesA VirtualAllocEx GetCurrentProcessId EnterCriticalSection VirtualFree TerminateProcess LeaveCriticalSection InitializeCriticalSection ResumeThread Thread32Next Thread32First GetTempPathW DeleteFileW ReleaseActCtx VirtualAlloc SuspendThread GetExitCodeThread TerminateThread GetThreadTimes OpenThread GetSystemInfo VirtualFreeEx Wow64DisableWow64FsRedirection Wow64RevertWow64FsRedirection GetSystemTimeAsFileTime QueryPerformanceCounter GetCurrentThread CreateNamedPipeW CreateThread GetNativeSystemInfo DuplicateHandle ResetEvent LocalFree IsWow64Process DeviceIoControl GetModuleFileNameW GetEnvironmentVariableW GetWindowsDirectoryW GetThreadContext CreateRemoteThread SetThreadContext LoadLibraryW FreeLibrary SetWaitableTimer CreateWaitableTimerA FormatMessageA QueryPerformanceFrequency VirtualProtect GetACP IsValidCodePage FindNextFileW SetEnvironmentVariableW WriteFile QueryDosDeviceW VirtualQueryEx GetModuleHandleW GetProcAddress LoadLibraryA GetModuleHandleA UnmapViewOfFile GetProcessHeap SetStdHandle WaitForSingleObject WriteConsoleW FindFirstFileExW FindClose ReadConsoleW FreeEnvironmentStringsW GetEnvironmentStringsW InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive TryEnterCriticalSection WaitForSingleObjectEx GetStringTypeW EncodePointer LCMapStringEx GetCPInfo InitializeCriticalSectionAndSpinCount SetEvent CreateEventW UnhandledExceptionFilter SetUnhandledExceptionFilter IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW InitializeSListHead OutputDebugStringW RtlUnwind SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW ExitProcess GetModuleHandleExW ExitThread FreeLibraryAndExitThread GetTimeZoneInformation GetCommandLineA GetCommandLineW HeapFree HeapAlloc GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP SetFilePointerEx CreateDirectoryW GetOEMCP

advapi32

RegSetValueExW RegCreateKeyW RegOpenKeyW LookupPrivilegeValueW AdjustTokenPrivileges RegCloseKey OpenProcessToken RegOpenKeyExW OpenThreadToken RegQueryValueExW

oleaut32

SysFreeString

shlwapi

SHDeleteKeyW

??0Assembler@asmjit@@QAE@PAURuntime@1@@Z ??0CodeGen@asmjit@@QAE@PAURuntime@1@@Z ??0HostRuntime@asmjit@@QAE@XZ ??0JitRuntime@asmjit@@QAE@XZ ??0Runtime@asmjit@@QAE@XZ ??0StaticRuntime@asmjit@@QAE@PAXI@Z ??0VMemMgr@asmjit@@QAE@PAX@Z ??0X86Assembler@asmjit@@QAE@PAURuntime@1@I@Z ??0Zone@asmjit@@QAE@I@Z ??1Assembler@asmjit@@UAE@XZ ??1CodeGen@asmjit@@UAE@XZ ??1HostRuntime@asmjit@@UAE@XZ ??1JitRuntime@asmjit@@UAE@XZ ??1Runtime@asmjit@@UAE@XZ ??1StaticRuntime@asmjit@@UAE@XZ ??1VMemMgr@asmjit@@QAE@XZ ??1X86Assembler@asmjit@@UAE@XZ ??1Zone@asmjit@@QAE@XZ ??_FVMemMgr@asmjit@@QAEXXZ ?_alloc@Zone@asmjit@@QAEPAXI@Z ?_emit@X86Assembler@asmjit@@UAEIIABUOperand@2@000@Z ?_grow@Assembler@asmjit@@QAEII@Z ?_grow@PodVectorBase@asmjit@@IAEIII@Z ?_newLabel@Assembler@asmjit@@QAEIPAULabel@2@@Z ?_newLabelLink@Assembler@asmjit@@QAEPAULabelLink@2@XZ ?_nullData@PodVectorBase@asmjit@@2UPodVectorData@2@B ?_registerIndexedLabels@Assembler@asmjit@@QAEII@Z ?_relocCode@X86Assembler@asmjit@@UBEIPAX_K@Z ?_reserve@Assembler@asmjit@@QAEII@Z ?_reserve@PodVectorBase@asmjit@@IAEIII@Z ?_x86CondToCmovcc@asmjit@@3QBIB ?_x86CondToJcc@asmjit@@3QBIB ?_x86CondToSetcc@asmjit@@3QBIB ?_x86InstExtendedInfo@asmjit@@3QBUX86InstExtendedInfo@1@B ?_x86InstInfo@asmjit@@3QBUX86InstInfo@1@B ?_x86ReverseCond@asmjit@@3QBIB ?add@JitRuntime@asmjit@@UAEIPAPAXPAUAssembler@2@@Z ?add@StaticRuntime@asmjit@@UAEIPAPAXPAUAssembler@2@@Z ?align@X86Assembler@asmjit@@UAEIII@Z ?alloc@VMemMgr@asmjit@@QAEPAXII@Z ?alloc@VMemUtil@asmjit@@SAPAXIPAII@Z ?allocProcessMemory@VMemUtil@asmjit@@SAPAXPAXIPAII@Z ?allocZeroed@Zone@asmjit@@QAEPAXI@Z ?bind@Assembler@asmjit@@UAEIABULabel@2@@Z ?callCpuId@X86CpuUtil@asmjit@@SAXIIPATX86CpuId@2@@Z ?detect@X86CpuUtil@asmjit@@SAXPAUX86CpuInfo@2@@Z ?detectHwThreadsCount@CpuInfo@asmjit@@SAIXZ ?dup@Zone@asmjit@@QAEPAXPBXI@Z ?embed@Assembler@asmjit@@UAEIPBXI@Z ?embedLabel@X86Assembler@asmjit@@QAEIABULabel@2@@Z ?emit@Assembler@asmjit@@QAEII@Z ?emit@Assembler@asmjit@@QAEIIABUOperand@2@00@Z ?emit@Assembler@asmjit@@QAEIIABUOperand@2@00H@Z ?emit@Assembler@asmjit@@QAEIIABUOperand@2@00_K@Z ?emit@Assembler@asmjit@@QAEIIABUOperand@2@0@Z ?emit@Assembler@asmjit@@QAEIIABUOperand@2@0H@Z ?emit@Assembler@asmjit@@QAEIIABUOperand@2@0_K@Z ?emit@Assembler@asmjit@@QAEIIABUOperand@2@@Z ?emit@Assembler@asmjit@@QAEIIABUOperand@2@H@Z ?emit@Assembler@asmjit@@QAEIIABUOperand@2@_K@Z ?emit@Assembler@asmjit@@QAEIIH@Z ?emit@Assembler@asmjit@@QAEII_K@Z ?flush@HostRuntime@asmjit@@UAEXPAXI@Z ?getCpuInfo@HostRuntime@asmjit@@UAEPBUCpuInfo@2@XZ ?getHost@CpuInfo@asmjit@@SAPBU12@XZ ?getPageGranularity@VMemUtil@asmjit@@SAIXZ ?getPageSize@VMemUtil@asmjit@@SAIXZ ?getStackAlignment@HostRuntime@asmjit@@UAEIXZ ?make@Assembler@asmjit@@UAEPAXXZ ?noOperand@asmjit@@3UOperand@1@B ?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KABUX86Reg@2@IHI@Z ?ptr_abs@x86@asmjit@@YA?AUX86Mem@2@_KHI@Z ?release@JitRuntime@asmjit@@UAEIPAX@Z ?release@StaticRuntime@asmjit@@UAEIPAX@Z ?release@VMemMgr@asmjit@@QAEIPAX@Z ?release@VMemUtil@asmjit@@SAIPAXI@Z ?releaseProcessMemory@VMemUtil@asmjit@@SAIPAX0I@Z ?relocCode@Assembler@asmjit@@QBEIPAX_K@Z ?reset@Assembler@asmjit@@QAEX_N@Z ?reset@PodVectorBase@asmjit@@QAEX_N@Z ?reset@VMemMgr@asmjit@@QAEXXZ ?reset@Zone@asmjit@@QAEX_N@Z ?sdup@Zone@asmjit@@QAEPADPBD@Z ?setArch@X86Assembler@asmjit@@QAEII@Z ?setError@CodeGen@asmjit@@QAEIIPBD@Z ?setErrorHandler@CodeGen@asmjit@@QAEIPAUErrorHandler@2@@Z ?sformat@Zone@asmjit@@QAAPADPBDZZ ?shrink@VMemMgr@asmjit@@QAEIPAXI@Z ?x86RegData@asmjit@@3UX86RegData@1@B