??0smss@@QAE@XZ
??1smss@@QAE@XZ
??4smss@@QAEAAV0@ABV0@@Z
?rsacnReslut@@YAXXZ
scanMiddle
scanbegin
Behavioral task
behavioral1
Sample
778133e57a37c8f8e1dedb3993b72526afd38ee3da7745987e6473bc60b240ee.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
778133e57a37c8f8e1dedb3993b72526afd38ee3da7745987e6473bc60b240ee.dll
Resource
win10v2004-20220812-en
Target
778133e57a37c8f8e1dedb3993b72526afd38ee3da7745987e6473bc60b240ee
Size
540KB
MD5
0d0a891460a0924b4c7f3a8f1e9b7c11
SHA1
f87bee56124ce529bf074e63c3749b138fe7a4cf
SHA256
778133e57a37c8f8e1dedb3993b72526afd38ee3da7745987e6473bc60b240ee
SHA512
d935eb2a5d7f7383b163ad54112bcd5ebdbbba1263421d3e8ea8d636f2a2a913272f4aa95afede88471cb8ce229a4688d222e60dea2dc70e739286afef0a4cfa
SSDEEP
12288:Lu8c2cZL03jqapxRjTyZC51deO3DhNuYenI3JPBrK+bVnOK8LY:rMZLmnhdBzyYP5HlHOY
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
StrRetToBufA
CoCreateInstance
SHGetMalloc
FindNextFileW
GetModuleHandleA
GetProcAddress
VirtualProtect
?uncaught_exception@std@@YA_NXZ
_vsnprintf_s
WSAAsyncSelect
FindWindowA
RegQueryValueExA
??0smss@@QAE@XZ
??1smss@@QAE@XZ
??4smss@@QAEAAV0@ABV0@@Z
?rsacnReslut@@YAXXZ
scanMiddle
scanbegin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ