Behavioral task
behavioral1
Sample
9132c7aab51c97f8204e786e00215e5c7fe8ecbe9be5151aa0e19dfaaa4c1987.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9132c7aab51c97f8204e786e00215e5c7fe8ecbe9be5151aa0e19dfaaa4c1987.dll
Resource
win10v2004-20220812-en
General
-
Target
9132c7aab51c97f8204e786e00215e5c7fe8ecbe9be5151aa0e19dfaaa4c1987
-
Size
848KB
-
MD5
153d274e8b91323fb0ea9d82d7113d80
-
SHA1
6b77f768ecdd41b731d7e0e2a334102168376c20
-
SHA256
9132c7aab51c97f8204e786e00215e5c7fe8ecbe9be5151aa0e19dfaaa4c1987
-
SHA512
b64a302c51b1c1addd8d70480a809cb3ad7b4734be0449dc0f4c748358908bb3942dc4f4898b45a8841b102e0d453f6012987a34217da78961a38b1291a499b8
-
SSDEEP
24576:b+yw44EUzlQKI6Y9/hMY78DksUXOhHdPTv1B:b+yxY/I6+v784sUXsJhB
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
9132c7aab51c97f8204e786e00215e5c7fe8ecbe9be5151aa0e19dfaaa4c1987.dll windows x86
a28fda869b2fdb80cf4030a5aee2adf6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersionExA
GetVersion
VirtualQuery
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxA
advapi32
OpenProcessToken
oleaut32
SafeArrayCreate
Sections
CODE Size: - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 653KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 845KB - Virtual size: 845KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ