Behavioral task
behavioral1
Sample
aef1e0f81bedaa32f5f03323e26d820d0fa9faeaae29715f0da22ae31980cadb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
aef1e0f81bedaa32f5f03323e26d820d0fa9faeaae29715f0da22ae31980cadb.exe
Resource
win10v2004-20220812-en
General
-
Target
aef1e0f81bedaa32f5f03323e26d820d0fa9faeaae29715f0da22ae31980cadb
-
Size
1.4MB
-
MD5
7fb0598bc4e967f46e69a8c795d63a47
-
SHA1
0ab7872a2b971d33a8882aba45b9023f3cd375ab
-
SHA256
aef1e0f81bedaa32f5f03323e26d820d0fa9faeaae29715f0da22ae31980cadb
-
SHA512
e2ea87963bc86291b069f6641a25db547d36a7d525aad7cf28b59c88ca6e0c987abd5a760cef0a5374c9f11d716d8880cd51f584bfc522291759f5212050caf6
-
SSDEEP
24576:25/mdD081kOcYcdWPwR8HO/82QoJ2JlNewD4cbiYs8:25/mZ1gYyWbHFxo0JlNew6H
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
aef1e0f81bedaa32f5f03323e26d820d0fa9faeaae29715f0da22ae31980cadb.exe windows x86
3204158fcd169f31c8196082125a5aef
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProfileStringA
SetEnvironmentVariableA
CompareStringW
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetDriveTypeA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadWritePtr
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
ExitThread
TerminateProcess
GetACP
GetSystemTime
GetTimeZoneInformation
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetTempPathA
GetPrivateProfileSectionNamesA
CompareStringA
GetExitCodeThread
ResetEvent
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
GetCurrentDirectoryA
SetErrorMode
SetFileAttributesA
SystemTimeToFileTime
LocalFileTimeToFileTime
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
SetThreadPriority
GetCurrentThread
lstrcmpA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
MulDiv
SetLastError
FormatMessageA
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
LockResource
GetVersion
FreeLibrary
LocalSize
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetSystemDirectoryA
ExitProcess
OutputDebugStringA
DeleteCriticalSection
CancelIo
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
GetQueuedCompletionStatus
CreateIoCompletionPort
GetSystemInfo
EnterCriticalSection
PostQueuedCompletionStatus
LeaveCriticalSection
InitializeCriticalSection
GetPrivateProfileIntA
GetPrivateProfileStringA
GetVersionExA
SetUnhandledExceptionFilter
LoadLibraryA
GetProcAddress
GetLastError
FindNextFileA
FindClose
lstrcpynA
LocalAlloc
LocalFree
GetLogicalDriveStringsA
GetVolumeInformationA
GetDiskFreeSpaceExA
GetTickCount
FindFirstFileA
MoveFileA
WritePrivateProfileStringA
GetFileSize
ReadFile
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
VirtualAlloc
VirtualFree
GetFileAttributesA
CreateDirectoryA
GetLocalTime
CopyFileA
GetModuleFileNameA
lstrcatA
CreateProcessA
lstrcpyA
SetFilePointer
lstrlenA
RemoveDirectoryA
DeleteFileA
WinExec
FindResourceA
SizeofResource
LoadResource
CreateFileA
WriteFile
Sleep
CreateThread
ResumeThread
SetEvent
WaitForSingleObject
TerminateThread
CloseHandle
GetProfileIntA
CreateEventA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
SendMessageA
wsprintfA
SetRect
DestroyMenu
DestroyCursor
DestroyIcon
GetWindowLongA
GetNextDlgTabItem
GetParent
SetCursor
InvalidateRect
GetActiveWindow
WindowFromPoint
ClientToScreen
TrackPopupMenuEx
GetSubMenu
GetWindowRect
DrawFocusRect
InflateRect
CopyRect
GetClientRect
OffsetRect
DrawStateA
FillRect
GetSysColor
ReleaseDC
CreateIconIndirect
GetDC
GetIconInfo
LoadImageA
PostThreadMessageA
InvertRect
IsRectEmpty
SetParent
RegisterClipboardFormatA
LockWindowUpdate
GetDCEx
GetNextDlgGroupItem
CopyAcceleratorTableA
GetMenuStringA
InsertMenuA
GetSysColorBrush
GetClassNameA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
LoadIconA
GetMessageA
TranslateMessage
LoadMenuA
DispatchMessageA
LoadCursorA
DefWindowProcA
GetClassInfoA
GetCursor
DrawFrameControl
SetRectEmpty
SetTimer
SetCapture
ReleaseCapture
UnregisterClassA
DrawMenuBar
TranslateMDISysAccel
DefFrameProcA
ExcludeUpdateRgn
DefDlgProcA
GetClipboardFormatNameA
GetTabbedTextExtentA
CreatePopupMenu
SetCursorPos
UnionRect
HideCaret
ShowCaret
IsMenu
GetMenuDefaultItem
GetMenuItemInfoA
SendMessageTimeoutA
GetDoubleClickTime
GetWindowRgn
IsWindowUnicode
TranslateAcceleratorA
LoadAcceleratorsA
MapDialogRect
SetWindowContextHelpId
ValidateRect
ShowOwnedPopups
PostQuitMessage
IsZoomed
CharUpperA
LoadStringA
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
wvsprintfA
GetMenuCheckMarkDimensions
ModifyMenuA
RegisterWindowMessageA
EnableWindow
FindWindowA
PostMessageA
MessageBoxA
GetForegroundWindow
GetWindowLongW
SetWindowLongW
SetWindowRgn
GetMenuStringW
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
IsClipboardFormatAvailable
GetKeyboardLayoutList
GetKeyboardState
ToAsciiEx
GetKeyboardLayout
MapVirtualKeyExA
GetKeyNameTextA
IsCharLowerA
WaitMessage
MapVirtualKeyA
GetKeyState
KillTimer
PtInRect
CopyIcon
GetWindow
ScreenToClient
UpdateWindow
SetMenuItemBitmaps
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
GetScrollInfo
SetScrollRange
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
RegisterClassA
GetMenu
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
IsWindowVisible
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
SetPropA
SystemParametersInfoA
IsIconic
GetWindowPlacement
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
SetMenuDefaultItem
TrackPopupMenu
GetMenuItemID
IsWindow
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DrawTextA
GetMenuState
ShowScrollBar
DrawIconEx
IntersectRect
CheckMenuRadioItem
SetClassLongA
SetWindowLongA
SetForegroundWindow
GetDesktopWindow
LoadBitmapA
GetSystemMenu
AppendMenuA
CheckMenuItem
MessageBeep
GetSystemMetrics
DrawEdge
RedrawWindow
CharNextA
DeleteMenu
GetMenuItemCount
EnableMenuItem
GetCursorPos
GetFocus
GetDlgCtrlID
SetWindowPos
MessageBoxA
gdi32
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
PolyBezierTo
GetClipRgn
CreateRectRgn
ExtSelectClipRgn
ExcludeClipRect
DeleteObject
GetStockObject
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
DeleteDC
SetTextColor
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
SetBkColor
SelectObject
RectVisible
Escape
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
DPtoLP
GetTextMetricsA
GetCharWidthA
CreateFontA
CopyMetaFileA
GetTextColor
GetBkColor
LPtoDP
CreateBitmap
SetPixel
GetPixel
GetObjectA
CreatePolygonRgn
FillRgn
PlgBlt
Rectangle
CreateFontIndirectA
PtInRegion
StretchBlt
SetPixelV
GetTextExtentPoint32A
CreateDIBSection
StretchDIBits
ExtTextOutA
CreateSolidBrush
TextOutA
SetBkMode
RoundRect
CreatePen
GetClipBox
SaveDC
RestoreDC
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
CreateDIBitmap
GetTextExtentPointA
ExtFloodFill
ExtTextOutW
GetTextExtentPoint32W
BeginPath
CloseFigure
EndPath
StrokeAndFillPath
FillPath
StrokePath
Ellipse
GetViewportOrgEx
Polyline
GetRgnBox
ExtCreateRegion
GetBitmapBits
EnumFontFamiliesExA
GetDIBits
GetTextAlign
GetCurrentObject
GetWindowOrgEx
Polygon
ScaleWindowExtEx
PtVisible
SelectClipRgn
comdlg32
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
advapi32
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegDeleteKeyA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegCreateKeyA
shell32
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ord71
ShellExecuteExA
ShellExecuteA
ExtractIconA
Shell_NotifyIconA
DragFinish
DragQueryFileA
SHGetFileInfoA
comctl32
_TrackMouseEvent
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ImageList_Remove
ImageList_Draw
ImageList_GetImageInfo
ImageList_Add
ImageList_GetIcon
ImageList_DrawEx
ImageList_GetIconSize
ImageList_GetImageCount
ord17
oledlg
ord1
ord8
ole32
CoGetClassObject
ReleaseStgMedium
CLSIDFromProgID
CLSIDFromString
CoDisconnectObject
OleDuplicateData
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
OleIsCurrentClipboard
OleFlushClipboard
CoUninitialize
CoInitialize
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
olepro32
ord253
oleaut32
VariantChangeType
SysAllocStringByteLen
SysAllocString
VariantCopy
SysStringByteLen
LoadTypeLi
SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
VariantClear
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
VarBstrFromDate
OleLoadPicturePath
VariantChangeTypeEx
VarDateFromStr
shlwapi
PathRemoveFileSpecA
SHAutoComplete
ws2_32
inet_ntoa
getpeername
closesocket
getsockname
ntohs
recv
__WSAFDIsSet
send
WSACloseEvent
WSASend
WSARecv
accept
WSAGetLastError
setsockopt
WSACleanup
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
WSASocketA
WSACreateEvent
WSAEventSelect
bind
listen
socket
ioctlsocket
htons
connect
select
WSAStartup
gethostname
gethostbyname
WSAIoctl
pdh
PdhOpenQueryA
PdhGetFormattedCounterValue
PdhCollectQueryData
PdhAddCounterA
PdhCloseQuery
avifil32
AVIStreamRelease
AVIFileRelease
AVIStreamWrite
AVIFileOpenA
AVIFileCreateStreamA
AVIStreamSetFormat
AVIFileExit
AVIFileInit
msvfw32
DrawDibDraw
ICSeqCompressFrameEnd
ICCompressorFree
ICClose
ICOpen
ICSendMessage
ICSeqCompressFrameStart
ICDecompress
DrawDibClose
DrawDibOpen
skinh
SkinH_AdjustHSV
SkinH_SetAero
SkinH_SetMenuAlpha
SkinH_AdjustAero
SkinH_AttachRes
SkinH_Detach
wininet
InternetCloseHandle
InternetOpenA
InternetReadFile
InternetOpenUrlA
winmm
waveOutOpen
waveOutPrepareHeader
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInAddBuffer
waveOutGetNumDevs
waveOutWrite
waveInStop
waveInReset
PlaySoundA
waveInClose
waveOutReset
waveOutUnprepareHeader
waveOutClose
sndPlaySoundA
waveInStart
waveInUnprepareHeader
msvcp60
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??_8?$basic_fstream@DU?$char_traits@D@std@@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_8?$basic_fstream@DU?$char_traits@D@std@@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??0ios_base@std@@IAE@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??_7?$basic_fstream@DU?$char_traits@D@std@@@std@@6B@
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIABV12@II@Z
?clear@ios_base@std@@QAEXH_N@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Fpz@std@@3_JB
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?close@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@XZ
??1?$basic_fstream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
??1ios_base@std@@UAE@XZ
Sections
.text Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 452KB - Virtual size: 668KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: 1000KB - Virtual size: 999KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 172B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ