GetOutTime
MessyCode
RegisterPlugin
SuperProtect
Behavioral task
behavioral1
Sample
6e7d2668425ff36ae9acc5086464fe0e43b75f739e6dad8b50637f74b76eb512.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
6e7d2668425ff36ae9acc5086464fe0e43b75f739e6dad8b50637f74b76eb512.dll
Resource
win10v2004-20220812-en
Target
6e7d2668425ff36ae9acc5086464fe0e43b75f739e6dad8b50637f74b76eb512
Size
1.3MB
MD5
e0c9866574716c189452909a57705a64
SHA1
5c362f29398fca8655a44c68178d1e5c7fe055fd
SHA256
6e7d2668425ff36ae9acc5086464fe0e43b75f739e6dad8b50637f74b76eb512
SHA512
7096103f01ab6e289898adf640b7e8edd83371e9313f1909e444e5244817342e522b213326e2c511050ecb7acbd9385669dbbf5bf0c0ff0a6dc2a14aaba18519
SSDEEP
24576:D7ZU9kI0yRzQRW3OeEaKwSfpcUJAnlpxLdeEZ0am9RFYjMictq+paZTxi:/ZU9r9RzQMTEaKrpceAfbeG0amKjUr84
Processes:
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetVersionExA
GetVersion
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CallWindowProcA
SetWindowExtEx
WSACleanup
DocumentPropertiesA
RegCreateKeyExA
SHGetSpecialFolderPathA
ord17
HttpOpenRequestA
RasGetConnectStatusA
GetOutTime
MessyCode
RegisterPlugin
SuperProtect
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ