CPlApplet
Behavioral task
behavioral1
Sample
61d74ec24673ae6ee81d616fd1f6c1288040a65f0f47bd27e1439c726b8ffd74.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
61d74ec24673ae6ee81d616fd1f6c1288040a65f0f47bd27e1439c726b8ffd74.dll
Resource
win10v2004-20220812-en
General
-
Target
61d74ec24673ae6ee81d616fd1f6c1288040a65f0f47bd27e1439c726b8ffd74
-
Size
323KB
-
MD5
59ff571b4bbc701a11870a5a05ad2a17
-
SHA1
43f56ad551fd8b632a4defa972ed6a947c8ef200
-
SHA256
61d74ec24673ae6ee81d616fd1f6c1288040a65f0f47bd27e1439c726b8ffd74
-
SHA512
ae3f28d5c5871a17274b3f949303276966d3a01cbc672ac906bfbfdc06839391dafb55bbac88436593d255933480519ec97859ad1ff19f1c82d8a8e2ce5a9fb9
-
SSDEEP
6144:aGBCi6C95N1sJC8U/PIItSpTxhbqrbrKeLWsw5TXeeZTOx9fxDamU6VjJ8iESVOQ:aq1s83SpvbiusICSE5VnJ8wVOoH
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
61d74ec24673ae6ee81d616fd1f6c1288040a65f0f47bd27e1439c726b8ffd74.dll windows x86
8875240288bd44e4bb99b8480ce08b47
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersionExA
GetVersion
InterlockedDecrement
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
CreateIcon
advapi32
RegQueryValueExA
oleaut32
SafeArrayPtrOfIndex
gdi32
GetObjectA
wininet
InternetOpenUrlA
shfolder
SHGetFolderPathA
shell32
ShellExecuteA
Exports
Exports
Sections
CODE Size: - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 321KB - Virtual size: 320KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 280B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ