CPlApplet
Behavioral task
behavioral1
Sample
5073981fb051015fb89dd185012aced62d3f16e27732f6f443a4d68141b4fa2f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5073981fb051015fb89dd185012aced62d3f16e27732f6f443a4d68141b4fa2f.dll
Resource
win10v2004-20220901-en
General
-
Target
5073981fb051015fb89dd185012aced62d3f16e27732f6f443a4d68141b4fa2f
-
Size
771KB
-
MD5
0a6e3ba5777c0d36146960bb7f843f39
-
SHA1
b68511cf9a928a289d80a4688b0de813048db9ea
-
SHA256
5073981fb051015fb89dd185012aced62d3f16e27732f6f443a4d68141b4fa2f
-
SHA512
360b1f6fdd6717f01d3494ee4bc3599620ff65bf6d1120151be2350a89898819a371fcf5fd8544ba15ef8a22dac01c503acbe25e3856434f3f8ecc300ae442de
-
SSDEEP
24576:/PlTqxh3TPsbFPSyu3QVQU1K3BKg792Ob:nlTOPsbUyuwQUwUO92Ob
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
5073981fb051015fb89dd185012aced62d3f16e27732f6f443a4d68141b4fa2f.dll windows x86
96fb3935614b2409ea37d37a6fc95601
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
DeleteCriticalSection
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
GetDCEx
advapi32
RegCloseKey
oleaut32
VariantChangeType
version
GetFileVersionInfoA
gdi32
DeleteDC
ole32
CoInitialize
wininet
InternetOpenUrlA
comctl32
ImageList_SetBkColor
comdlg32
PrintDlgA
winspool.drv
EnumPrintersA
shfolder
SHGetFolderPathA
Exports
Exports
Sections
CODE Size: - Virtual size: 639KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 7KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 461KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 764KB - Virtual size: 764KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 200B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ