Behavioral task
behavioral1
Sample
e52f0fb02bc6667b25a2594a4c29b79fd8f51259b727aeae3b69eff8933ac5b0.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e52f0fb02bc6667b25a2594a4c29b79fd8f51259b727aeae3b69eff8933ac5b0.dll
Resource
win10v2004-20220812-en
General
-
Target
e52f0fb02bc6667b25a2594a4c29b79fd8f51259b727aeae3b69eff8933ac5b0
-
Size
592KB
-
MD5
4f5aa6f3d4c393165b98c78da658d331
-
SHA1
a933ffbc94d44f35b3ffcba97b678ae781b9d2de
-
SHA256
e52f0fb02bc6667b25a2594a4c29b79fd8f51259b727aeae3b69eff8933ac5b0
-
SHA512
f8d87a48f520eaa3b68f7233e6edfba6a2e15d08131d5c15dbd80248fd024e48568c6cc64b8f428d6ca6a234f88a169e94ac3d19b1671bf3005c34141c5e8bef
-
SSDEEP
12288:sUZv5tIRBa95FswkvxfARARaGdHABfadzFBOWb6VGt0Em1/vCHCwS:ZZvCMFswkpZgOEfadzFBTbMBhwS
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
e52f0fb02bc6667b25a2594a4c29b79fd8f51259b727aeae3b69eff8933ac5b0.dll windows x86
9f311093280b58884e2de26401ef236f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualQueryEx
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
DefWindowProcW
MessageBoxA
advapi32
RegOpenKeyA
ws2_32
send
Sections
.text Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp1 Size: - Virtual size: 467KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 580KB - Virtual size: 578KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 208B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ