CPlApplet
Behavioral task
behavioral1
Sample
647c496be24a90877f8010cfd7a4fe92fced1a4db51c35deca414822c791a614.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
647c496be24a90877f8010cfd7a4fe92fced1a4db51c35deca414822c791a614.dll
Resource
win10v2004-20220812-en
General
-
Target
647c496be24a90877f8010cfd7a4fe92fced1a4db51c35deca414822c791a614
-
Size
568KB
-
MD5
e298ff3081137da8e39b524faaa3b562
-
SHA1
c6dc5feee1033793eddbb8c77640c8b6095a0c9f
-
SHA256
647c496be24a90877f8010cfd7a4fe92fced1a4db51c35deca414822c791a614
-
SHA512
282386431989d678892a90e74ba7187f68239e91b195e267a6f384a3806e7355552e63bdd2563dd74efb7e05600e89b741f9b47eb3c4bfb11bf4130efa8d066c
-
SSDEEP
12288:alCNT/BV7gM0v/l3Q3JT8yofpD/AGjvZ6fT9bw1yTwrKiD2:alCNTJu3ApItZjvZ6hbwMUOiy
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
647c496be24a90877f8010cfd7a4fe92fced1a4db51c35deca414822c791a614.dll windows x86
12c38aaa7bef4b4a16cd6989f17654ab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersion
GetVersionExA
GetVersion
ResumeThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
ShowWindow
advapi32
RegOpenKeyExA
oleaut32
SafeArrayGetUBound
version
VerQueryValueA
gdi32
GetCurrentPositionEx
comctl32
ImageList_Read
wininet
InternetReadFile
Exports
Exports
Sections
CODE Size: - Virtual size: 365KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: - Virtual size: 70B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 562KB - Virtual size: 562KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ