?a?��
_???������3��D��
Behavioral task
behavioral1
Sample
a47d1468b073b57c1b40997b8d04a1edf465aaeb808e66b92aba46091088a09b.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a47d1468b073b57c1b40997b8d04a1edf465aaeb808e66b92aba46091088a09b.dll
Resource
win10v2004-20220812-en
Target
a47d1468b073b57c1b40997b8d04a1edf465aaeb808e66b92aba46091088a09b
Size
840KB
MD5
6590b276cff669454ce025fa8d704304
SHA1
c5c64038c24885fa8be70f747ef0f86734356c15
SHA256
a47d1468b073b57c1b40997b8d04a1edf465aaeb808e66b92aba46091088a09b
SHA512
98a000e1202dbbd49e1e536b800f9bdd7736d1a4c4620c2b375ea5ec03d7c5518ac61ca33ba54a2815d427b5e33db6b4dc4e1f254b81128b9fc71b55afdb1ff8
SSDEEP
24576:69yuKo8b256b3Ip4Fwd5f9GFDJuIMrbeR9pI:6IMtwMeFwd5CduIMrinpI
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
InitializeCriticalSection
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetMenuState
CreatePen
midiOutUnprepareHeader
OpenPrinterA
RegCreateKeyExA
Shell_NotifyIconA
OleUninitialize
LoadTypeLi
ImageList_Destroy
recv
GetOpenFileNameA
?a?��
_???������3��D��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ