??����?��??��yD��
??����D��??��yD��
?a?��
?��?��
?��?��1
RunDllHostCallBack
Behavioral task
behavioral1
Sample
f09860d04a653ddf387b9142bb14236ff16ab7db8d99b795a223f02c86604778.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f09860d04a653ddf387b9142bb14236ff16ab7db8d99b795a223f02c86604778.dll
Resource
win10v2004-20220812-en
Target
f09860d04a653ddf387b9142bb14236ff16ab7db8d99b795a223f02c86604778
Size
800KB
MD5
0a24f6719574332fb605c8064c11fdf7
SHA1
b76997af244a63d007a47dad7dae017b11cc7431
SHA256
f09860d04a653ddf387b9142bb14236ff16ab7db8d99b795a223f02c86604778
SHA512
ca1dcfced0ac484f4d9761ff49c12f1c671379186c9e1a4f017b248b0f47d7a479c9fa60da9246b3adb4c48561370ceb5dc998f111719793b14c5622d170f9e0
SSDEEP
24576:VeL9DHqUsyr5kvTFwnh1y8+25WNGcSUd:VeLRmydmTF07y8T569Nd
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
HeapCreate
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
ChildWindowFromPointEx
EndPath
midiStreamProperty
DocumentPropertiesA
RegSetValueExA
ShellExecuteA
OleInitialize
UnRegisterTypeLi
ord17
getpeername
GetSaveFileNameA
??����?��??��yD��
??����D��??��yD��
?a?��
?��?��
?��?��1
RunDllHostCallBack
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ