CPlApplet
Behavioral task
behavioral1
Sample
683caf1885603303359458b665995f8cd4a05c8108b1b181bcaee5c8aea3844d.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
683caf1885603303359458b665995f8cd4a05c8108b1b181bcaee5c8aea3844d.dll
Resource
win10v2004-20220901-en
General
-
Target
683caf1885603303359458b665995f8cd4a05c8108b1b181bcaee5c8aea3844d
-
Size
234KB
-
MD5
b0085851eaf97f248bfffbbfa3ef3a58
-
SHA1
4660f7d7ec5ac3d4ac114031b8b4073a4ee63aa7
-
SHA256
683caf1885603303359458b665995f8cd4a05c8108b1b181bcaee5c8aea3844d
-
SHA512
388eed2243492a434f10c3ee289d379417ee0158e9b299bf00cc7fe1a75ddfeaefd31f73b1ea365d18bfaf5338a9228d1d719ea80a512bcc95cb756fc29d1456
-
SSDEEP
3072:XgO9Fyan9e6H2On2jw7jBh4HmJXqY91bRH2n0ZXhbfLxLSE/btY3VIS6JnfndTNQ:X9FyifHdphh4GJV9r7SEux6DC4KxAZe
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
683caf1885603303359458b665995f8cd4a05c8108b1b181bcaee5c8aea3844d.dll windows x86
339dbc806cea975849ddd6b2c29c8b37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetVersionExA
GetVersion
GetModuleHandleA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetSysColor
advapi32
RegCreateKeyExA
oleaut32
SysReAllocStringLen
gdi32
StretchBlt
urlmon
URLDownloadToFileA
shfolder
SHGetFolderPathA
Exports
Exports
Sections
CODE Size: - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 2KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 230KB - Virtual size: 230KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 148B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ