�����ý���
���봰��
Behavioral task
behavioral1
Sample
b39ac2641878fc6a192504efa3cc3c3927d8831b9754de9ebc0ef85299fb0a36.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b39ac2641878fc6a192504efa3cc3c3927d8831b9754de9ebc0ef85299fb0a36.dll
Resource
win10v2004-20220812-en
Target
b39ac2641878fc6a192504efa3cc3c3927d8831b9754de9ebc0ef85299fb0a36
Size
692KB
MD5
0855caa1ecb4857c83d75ece0e42c4c0
SHA1
d844b61f0f776a9d4cef24a2348d17a6c05c40d0
SHA256
b39ac2641878fc6a192504efa3cc3c3927d8831b9754de9ebc0ef85299fb0a36
SHA512
27eff2b211efd43914689480fe8d60a276e2eddff399b346c4d169c01df7931d0961c18cf9c718c3a38b5cf85d2713d4608a3de694f7fbeeee1d32f317f2612e
SSDEEP
12288:Nzg7SJUcDTk1TrvCS3+UFz4v1JRYFaaWFw1yTjihYQepAEVwUrhYZ4suCWRiu:m2JzTCzx3+UIcMaWFwk3i2lz+Z1uCCiu
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
FindFirstFileA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
OpenClipboard
MessageBoxA
SetBkMode
waveOutReset
ClosePrinter
RegQueryValueA
Shell_NotifyIconA
CLSIDFromString
UnRegisterTypeLi
ImageList_Destroy
recvfrom
GetSaveFileNameA
�����ý���
���봰��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ