Behavioral task
behavioral1
Sample
7f8537282f378003d4445ce13e143d8523468a4dcb51d72e8f529baaa6145596.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
7f8537282f378003d4445ce13e143d8523468a4dcb51d72e8f529baaa6145596.dll
Resource
win10v2004-20220901-en
General
-
Target
7f8537282f378003d4445ce13e143d8523468a4dcb51d72e8f529baaa6145596
-
Size
219KB
-
MD5
7c58b6e180a5cf2c19a558d706131243
-
SHA1
a744ec7eb07df415082d08468d8f9a2897382b18
-
SHA256
7f8537282f378003d4445ce13e143d8523468a4dcb51d72e8f529baaa6145596
-
SHA512
935a6021528f0365d36e2a66528f09781e782c5989f5b87d0174eebab74187ab5e2089166f17c3b26273c752d3a78503cc9f8c2827b432fe37e43df334f5fcd6
-
SSDEEP
3072:Nlvj7tyYp1vuMT7iC+/SLYV5BUN8n1h4+dxiCYK/VbLGg53o2Wg77XUKOKH2PExG:N53tZp1vXYCjG1eyxiCPtp3XWCkyL
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
7f8537282f378003d4445ce13e143d8523468a4dcb51d72e8f529baaa6145596.dll windows x86
0a2721216b8bd227fdfaa02ba9b3d65f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetSystemMetrics
gdi32
SetBkMode
advapi32
GetUserNameA
msvcr90
__dllonexit
msvcp90
?uncaught_exception@std@@YA_NXZ
d3d9
Direct3DCreate9
wininet
InternetOpenA
urlmon
URLDownloadToFileA
Sections
.text Size: - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.vmp2 Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ