SetHook
SetName
Behavioral task
behavioral1
Sample
822bafa548278d2559660cfec702f0123d02ef0a1d4c23351acaebe28a7a9d3f.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
822bafa548278d2559660cfec702f0123d02ef0a1d4c23351acaebe28a7a9d3f.dll
Resource
win10v2004-20220812-en
Target
822bafa548278d2559660cfec702f0123d02ef0a1d4c23351acaebe28a7a9d3f
Size
327KB
MD5
91f1cdf9df39b6c0486277e4ef1818c7
SHA1
cba42ce5ddb87b5a521b6dc569a4296789f5fef2
SHA256
822bafa548278d2559660cfec702f0123d02ef0a1d4c23351acaebe28a7a9d3f
SHA512
65403e6d668b098bba136a7bfa146eab536c68587d55c202c6599539ccfabc9bedec7e60e7ee1284968cbee718781c6dff936f9b76f4cb39db2c2ca5901d27c0
SSDEEP
6144:9KleXWMzLp6p750N0exZUkf0Jx+GQB+TDsAVVEgjDf6STtlvAx0U/pkCm:z0y0ext++ITDBVEeDf6ktloxV/pI
Processes:
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
WSAGetLastError
VirtualFree
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetHook
SetName
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ