AccessibleObjectFromWindow
LresultFromObject
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
22585ab7de35b08fde0936704c556c39f0e0d554a4522c01ec8c16777ba7bd6f.dll
Resource
win7-en-20211208
Target
22585ab7de35b08fde0936704c556c39f0e0d554a4522c01ec8c16777ba7bd6f
Size
10.6MB
MD5
2895127494f4f2c45357dfae7dda9ec6
SHA1
29821030519227db7fa3c37db36b213f1c6f0a0a
SHA256
22585ab7de35b08fde0936704c556c39f0e0d554a4522c01ec8c16777ba7bd6f
SHA512
2a837fe1cb0a8f0a57d997f82c1f6a42704deaba07f4ec94c2e2d60743b40dc6196a251290a191f4746cc8d67cc36695e9c4c64c795591a40406701296540f42
SSDEEP
196608:e64wBo/g9YQR6hpOG0K97jm1dd2KjBLpRsWKBZLYcJ8nK2teeKQPCJeonBcKZX:e64wBJ4DOu97m2YLpREHLmnplPPCJeo
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
WNetGetConnectionW
timeGetTime
InternetGetConnectedState
DocumentPropertiesW
ChooseFontW
ImageList_GetImageInfo
SHGetFolderPathW
accept
MoveWindow
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
GetFileVersionInfoSizeW
SysFreeString
strncmp
RegSetValueExW
NetWkstaGetInfo
GetVersion
GetVersionExW
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
gethostbyaddr
IsEqualGUID
Pie
WTSSendMessageW
AccessibleObjectFromWindow
LresultFromObject
TMethodImplementationIntercept
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ