mymain
Behavioral task
behavioral1
Sample
64c04e6f93cfe310b1261066752b489099c9de54da27d21012b31a47b03b5400.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
64c04e6f93cfe310b1261066752b489099c9de54da27d21012b31a47b03b5400.dll
Resource
win10v2004-20230703-en
General
-
Target
64c04e6f93cfe310b1261066752b489099c9de54da27d21012b31a47b03b5400
-
Size
13.8MB
-
MD5
4d9d41a555a8b0de97637d57d459ad57
-
SHA1
1f04633f958cacfb839d494e6f36b152ba7786d1
-
SHA256
64c04e6f93cfe310b1261066752b489099c9de54da27d21012b31a47b03b5400
-
SHA512
cdf4266a0744a1d526e970ab2f8d3c927994673e2bff0396c1d310ab5701af61d29661ee3923e87ec0102055f4be0ddfe226e5613f8b4e400ce260da00dd201e
-
SSDEEP
196608:+LyB8mzxWFvDHMMuK6xs1IOoKdOBAJ8TrODJEv3n/Jpz/McywXW7/TN0rUw:+GBpkFvgMuK6UFxduu2wEfnxVkcW7
Malware Config
Signatures
-
resource yara_rule sample vmprotect -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 64c04e6f93cfe310b1261066752b489099c9de54da27d21012b31a47b03b5400
Files
-
64c04e6f93cfe310b1261066752b489099c9de54da27d21012b31a47b03b5400.dll windows x86
5ec8f5c251a607a26f7d3c8985b80a8b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
GetVersion
GetVersionExA
GlobalHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
IsZoomed
gdi32
CreatePolygonRgn
winmm
waveOutUnprepareHeader
winspool.drv
OpenPrinterA
advapi32
RegCreateKeyExA
shell32
Shell_NotifyIconA
ole32
OleInitialize
oleaut32
LoadTypeLi
comctl32
ImageList_Destroy
ws2_32
WSACleanup
comdlg32
GetOpenFileNameA
Exports
Exports
Sections
.text Size: - Virtual size: 985KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 3.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 9.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 13.8MB - Virtual size: 13.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ