??0smss@@QAE@XZ
??1smss@@QAE@XZ
??4smss@@QAEAAV0@ABV0@@Z
?rsacnReslut@@YAXXZ
scanMiddle
scanbegin
Behavioral task
behavioral1
Sample
80a8ddb00fc84afd9b155c36aebbb9a74191e40d5daace7b0c8a101d57aea5a2.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
80a8ddb00fc84afd9b155c36aebbb9a74191e40d5daace7b0c8a101d57aea5a2.dll
Resource
win10v2004-20220812-en
Target
80a8ddb00fc84afd9b155c36aebbb9a74191e40d5daace7b0c8a101d57aea5a2
Size
532KB
MD5
042da01d74f99b75e3a532ffbbe81bfc
SHA1
6f4d77e11632710d12ae082f795b227032b1a611
SHA256
80a8ddb00fc84afd9b155c36aebbb9a74191e40d5daace7b0c8a101d57aea5a2
SHA512
d6d4c37b6beeff1c69dafb62ace262675a19e5ffb64941d67673407d904d8725f910ce810253372c5cc94fa4f277cd897d0a41d49f70beb8f0ff1b455eb9ee66
SSDEEP
12288:7lhji6zuyUD3XCgI6Cm9TrlRppICzpuCjpQ9OVP9KmlI:7lhmCuyk3XZRoC8CYON9fC
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrRetToBufA
CoCreateInstance
SHGetMalloc
FindNextFileW
GetModuleHandleA
GetProcAddress
VirtualProtect
?uncaught_exception@std@@YA_NXZ
_vsnprintf_s
WSAAsyncSelect
FindWindowA
RegQueryValueExA
??0smss@@QAE@XZ
??1smss@@QAE@XZ
??4smss@@QAEAAV0@ABV0@@Z
?rsacnReslut@@YAXXZ
scanMiddle
scanbegin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ