ComInit1
ComInit2
ComInit3
ComInit4
ComInit5
ComInit6
ComInit7
Behavioral task
behavioral1
Sample
671a5bde6fe446ba7ec28d55fa582bdcfdd0aa6b41afec90823f8d1989cb0996.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
671a5bde6fe446ba7ec28d55fa582bdcfdd0aa6b41afec90823f8d1989cb0996.dll
Resource
win10v2004-20220812-en
Target
671a5bde6fe446ba7ec28d55fa582bdcfdd0aa6b41afec90823f8d1989cb0996
Size
544KB
MD5
19c2db2984dd914d36e6c15607997eff
SHA1
80fa8a431e6e305d7dbf369ad09f366b09f2836a
SHA256
671a5bde6fe446ba7ec28d55fa582bdcfdd0aa6b41afec90823f8d1989cb0996
SHA512
ebc56a779ef058a9aa1ba7b125058168d08c1c791c70d4c1ac3557549f00a27dec8982ee247e9324a4ee07c26ff6302de07806c45bf5b0c2d95af36d973e639c
SSDEEP
12288:iQxglDqDxulj52lBfCwV6AT/JGBaS2j9n+ORL4mMBajVPqksg6S5Y:iQalD8xulj5OAA6YoBlWerajVojS
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetCommandLineA
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
ComInit1
ComInit2
ComInit3
ComInit4
ComInit5
ComInit6
ComInit7
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ