CheckRuntime
EncryptString
GetCpuID
GetCpuIDW
GetDiskID
GetDiskIDW
GetMacID
GetMacIDW
GetModuleBase
MainDLL
_CorExeMain
Behavioral task
behavioral1
Sample
77c8df6cee578d12bf492eed9733322c016e5bfe13df4a63d3ae3fc8fccaee66.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
77c8df6cee578d12bf492eed9733322c016e5bfe13df4a63d3ae3fc8fccaee66.dll
Resource
win10v2004-20221111-en
Target
77c8df6cee578d12bf492eed9733322c016e5bfe13df4a63d3ae3fc8fccaee66
Size
1.2MB
MD5
1dd997884ac9ac47cdad4b91e4fb7930
SHA1
3e68c912b98277e47663b414d7f68772596b2956
SHA256
77c8df6cee578d12bf492eed9733322c016e5bfe13df4a63d3ae3fc8fccaee66
SHA512
624f04b06cad900baa79c73a78e0577d6b640ef78680d5d09bfc093e61e05063a5afeec626c84993a3e7cff348f707533ee91e3828acb363109984c26da2a80f
SSDEEP
24576:i5cO2BGt7zG4TOaeOvDzCpKts64Q6dw9o6b6jY0KNAoH:FO2sfGdOvXCpQK5y90oAo
Processes:
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetFileVersionInfoSizeA
GetModuleInformation
GetAdaptersInfo
GetVersionExA
GetVersion
FreeLibrary
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetTopWindow
ScaleViewportExtEx
GetFileTitleA
ClosePrinter
RegDeleteKeyA
ord17
PathFindExtensionA
VariantInit
CheckRuntime
EncryptString
GetCpuID
GetCpuIDW
GetDiskID
GetDiskIDW
GetMacID
GetMacIDW
GetModuleBase
MainDLL
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ