Behavioral task
behavioral1
Sample
87d26d8ebc0aa5ca8577c4985b33ee504c80805fd4d79bc14f64c9d1f001f774.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
87d26d8ebc0aa5ca8577c4985b33ee504c80805fd4d79bc14f64c9d1f001f774.dll
Resource
win10v2004-20220812-en
General
-
Target
87d26d8ebc0aa5ca8577c4985b33ee504c80805fd4d79bc14f64c9d1f001f774
-
Size
132KB
-
MD5
9014a3d2037b7683c83af5fb116c7d50
-
SHA1
084109d091c8475c5856993ce555082c7ebfc1ae
-
SHA256
87d26d8ebc0aa5ca8577c4985b33ee504c80805fd4d79bc14f64c9d1f001f774
-
SHA512
2b266a48c4728681eda50ee55ee515296c84f1c0dbb6c6df64c27ed2c6717c73ff110fb72b94a8d64310104f7feb55f99670b0bc2d0ecb499754a94f1015be29
-
SSDEEP
3072:H3/gz1Ly7cDzSAPxsi98cpCUvfIrGjbTbeSt:H4scSAPxH987UIrybTSSt
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
87d26d8ebc0aa5ca8577c4985b33ee504c80805fd4d79bc14f64c9d1f001f774.dll windows x86
049914539666e32ee51ff1f028f0d80c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
SetRect
msvcp90
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
wininet
InternetOpenUrlA
d3dx9_43
D3DXCreateFontA
msvcr90
_CIcos
Sections
.text Size: - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 129KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 686B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ