?close@@YGKK@Z
close
getkey
setkey
Behavioral task
behavioral1
Sample
6811f8197b9150bb2937b26f8da3f945af557cc418483772246357c1d42fb661.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
6811f8197b9150bb2937b26f8da3f945af557cc418483772246357c1d42fb661.dll
Resource
win10v2004-20220901-en
Target
6811f8197b9150bb2937b26f8da3f945af557cc418483772246357c1d42fb661
Size
422KB
MD5
32057a06d73bef047195554b89e9523a
SHA1
aa13a00d7673feebc8d99678bccc583ee180898f
SHA256
6811f8197b9150bb2937b26f8da3f945af557cc418483772246357c1d42fb661
SHA512
f33d170fb3b756bb707495af09ba730d58045210f80f6762465d4b241c4a57d318936b88b8cb28c534833fa8d155a0d423a439a027693e4abd86e23c0d3a5d65
SSDEEP
12288:p+158vGXt3iL3ETIFdLczarkOWGXa7Yia:M8vR3XJWuji
Processes:
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
KillTimer
send
GetModuleHandleW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
?close@@YGKK@Z
close
getkey
setkey
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ