SetHook
SetName
Behavioral task
behavioral1
Sample
01936db2d05b34fa2d4e0bbb3623bae94dab294ba53f8611f699c972b566b653.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
01936db2d05b34fa2d4e0bbb3623bae94dab294ba53f8611f699c972b566b653.dll
Resource
win10v2004-20220901-en
Target
01936db2d05b34fa2d4e0bbb3623bae94dab294ba53f8611f699c972b566b653
Size
327KB
MD5
03b97729adaede0b1407c1a7cf5ecd9e
SHA1
1c1335f096217bcd722f6cc55e16c0e83db018e3
SHA256
01936db2d05b34fa2d4e0bbb3623bae94dab294ba53f8611f699c972b566b653
SHA512
fb165a8cb72b3bd8c29d89c51f44854ae1bf50c7acd26e4f0956e2edd1e4fac12a3837fee822e50c532ac1722168b0c3cac5f56bc83d821c09a51b796b1a4160
SSDEEP
6144:deOPgK19B3SfpogX/0n5WrShmVHVLVRi5kzXycsbws9/whp8b5blW/GeXt:dej28rShm5Vmb1iaQ/x
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
select
WideCharToMultiByte
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetHook
SetName
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ