����4445
Behavioral task
behavioral1
Sample
99069ca7ac4c2ec68a1d8cb9527e0d435323c915ade1b3d1bb6cc89a6c5709dc.dll
Resource
win7-20220812-en
General
-
Target
99069ca7ac4c2ec68a1d8cb9527e0d435323c915ade1b3d1bb6cc89a6c5709dc
-
Size
932KB
-
MD5
613c1b13ccc2e6f798c54c1acf053880
-
SHA1
5535fb1b8f77b4bb9dd19aeb99f8ca78dca67bc0
-
SHA256
99069ca7ac4c2ec68a1d8cb9527e0d435323c915ade1b3d1bb6cc89a6c5709dc
-
SHA512
92a38c2cd4773b737266c31742dd42e32cd086f0652767cdac4ed562faa26e9fcff8d8cb3426a37cc3b5d6d7dee76b9fec10b592c9d1518f7ad340b77ac47d7e
-
SSDEEP
12288:nmv2qPjNvAUUGu7vNOjwQCEGnSe/QdF/nDAuWkgUrNgnvvP9bcMrhtMmyKz2J8fP:nmvvjNFqg8x/Qd5JgUSnHx31ahKz2a
Malware Config
Signatures
-
resource yara_rule sample vmprotect
Files
-
99069ca7ac4c2ec68a1d8cb9527e0d435323c915ade1b3d1bb6cc89a6c5709dc.dll windows x86
7922f25092bb92538196f1088f23f222
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
GetClipboardData
MessageBoxA
gdi32
SaveDC
winmm
midiStreamRestart
winspool.drv
ClosePrinter
advapi32
RegCloseKey
shell32
SHGetSpecialFolderPathA
ole32
CLSIDFromString
oleaut32
RegisterTypeLi
comctl32
ImageList_Destroy
ws2_32
accept
comdlg32
GetSaveFileNameA
Exports
Exports
Sections
.text Size: - Virtual size: 542KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 145KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vmp0 Size: - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.vmp2 Size: 916KB - Virtual size: 912KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ