?a?��
_???������3��D��
Behavioral task
behavioral1
Sample
fc6a36102f4e423385cea69f6c56e7d7274782ea8ff4e35438d1e6720693dda2.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fc6a36102f4e423385cea69f6c56e7d7274782ea8ff4e35438d1e6720693dda2.dll
Resource
win10v2004-20221111-en
Target
fc6a36102f4e423385cea69f6c56e7d7274782ea8ff4e35438d1e6720693dda2
Size
1.7MB
MD5
8f9a6480af39d2309333185bcf3f7fd5
SHA1
06533797d8d854c8fd62f5fe632be062cf4f15c4
SHA256
fc6a36102f4e423385cea69f6c56e7d7274782ea8ff4e35438d1e6720693dda2
SHA512
2049fdccfa9b335b83cf7d87ac1e3f8e3b8deb5a3deefea50b29401fe8790ac834c2ad65e900887e41e02c5c9dbb03b41d5016c8dad868ebba39e47a812aa3eb
SSDEEP
24576:1dFxVPjQyYcBeglfekta/d5lpf0o1+dk/z9OIu4d1KCHuAWy5e:1zHxYchGv/8WSWruyJHuYe
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetEnvironmentStrings
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
RegisterClipboardFormatA
SetWindowOrgEx
waveOutGetNumDevs
ClosePrinter
RegQueryValueA
ShellExecuteA
OleUninitialize
UnRegisterTypeLi
ord17
inet_ntoa
GetOpenFileNameA
?a?��
_???������3��D��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ