Behavioral task
behavioral1
Sample
07cb58ad614f76addcabd95cc096816e84b2a043d07bdbcd95059fd1ca81be92.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
07cb58ad614f76addcabd95cc096816e84b2a043d07bdbcd95059fd1ca81be92.dll
Resource
win10v2004-20220812-en
General
-
Target
07cb58ad614f76addcabd95cc096816e84b2a043d07bdbcd95059fd1ca81be92
-
Size
273KB
-
MD5
a0d7116342ce823f972f6a2c17109f20
-
SHA1
4479c22e7d973b59d2c5dc9092b78826d8bb6276
-
SHA256
07cb58ad614f76addcabd95cc096816e84b2a043d07bdbcd95059fd1ca81be92
-
SHA512
c40f49f40b93a6495448f91bf9194bef6ea559008ad316bc5cfd8504baa0fd29e3204e6ecf015282ef20697b16c8f6dd867e7aa0461ba3329c1cffe9eda6033e
-
SSDEEP
6144:kxAI95nwXfFaZ/etbJ/3l9TAS3y6m2v7z3NH+20PGMEAPJi84qo:kxAI95wXdaItBL3y6Rd50P6APJMqo
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
07cb58ad614f76addcabd95cc096816e84b2a043d07bdbcd95059fd1ca81be92.dll windows x86
be9f588df8c6cdc6622f3ac10832a4ef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetAsyncKeyState
MessageBoxA
wininet
InternetOpenUrlA
msvcr90
_CIsin
gdi32
DeleteDC
advapi32
RegCloseKey
Sections
.text Size: - Virtual size: 210KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.vmp2 Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 324B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ