GetMSA
Mumum
UnMumum
Behavioral task
behavioral1
Sample
f6ec79fbf709439baa4bab5c339c2bbf5f72b967f0e111a198d8e99bd1e196d5.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f6ec79fbf709439baa4bab5c339c2bbf5f72b967f0e111a198d8e99bd1e196d5.dll
Resource
win10v2004-20220812-en
Target
f6ec79fbf709439baa4bab5c339c2bbf5f72b967f0e111a198d8e99bd1e196d5
Size
144KB
MD5
c2b586e3651d8f9f81fbce593b1bb8c5
SHA1
4e85eec54c0f7b47bdb58c78ba44323cef7db4f0
SHA256
f6ec79fbf709439baa4bab5c339c2bbf5f72b967f0e111a198d8e99bd1e196d5
SHA512
917bb246d0014bec3d2425bda21986f89447a5bf98a42a8826c6788496443f64d704f3c306a609f27e5f585703995f587dc0348c89af726923ea8f44d74544ad
SSDEEP
1536:w9btm2hGwI42tOPQUYpqcmqMPcYVl8VBm3D9aOd0YFYFWAQx2L3nmwUTWl49pSj3:Ut5uHXqcmcIlIIztd0YFzPcDm+CpIVt
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetProcAddress
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
RegisterWindowMessageA
GetMSA
Mumum
UnMumum
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ