InstallRT
InstallSA
InstallSB
InstallServiceA
InstallServiceB
PSLIST
ServiceMain
UninstallRT
UninstallSA
UninstallSB
UninstallServiceA
UninstallServiceB
Behavioral task
behavioral1
Sample
cbc7aac83ea510cc52e7558afdd8522c1e429309a8605dd2e13da53da6b342a1.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
cbc7aac83ea510cc52e7558afdd8522c1e429309a8605dd2e13da53da6b342a1.dll
Resource
win10v2004-20220901-en
Target
cbc7aac83ea510cc52e7558afdd8522c1e429309a8605dd2e13da53da6b342a1
Size
424KB
MD5
3568d0915fbfbd3e9e7e694fe6adbd28
SHA1
723d14be81732580a16a04a642b165e548411068
SHA256
cbc7aac83ea510cc52e7558afdd8522c1e429309a8605dd2e13da53da6b342a1
SHA512
31d18e8ccea2bfd35b9a4b0f9bea827ad226bc1f42ec57cc07a0f2ae1163d9e42ecac15bddafa849f218e59779b574c08dc35b17bd48353e20afcb8e329bf0d3
SSDEEP
12288:dKKB3aRkmIwIOF42sucpOj5PEsrsQnEfzrnagVZ:dKJRkmv5FHcpCPEs4vHagVZ
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
ShellExecuteA
CreateDIBSection
EnumProcessModules
recv
waveInPrepareHeader
GetVersionExA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetThreadDesktop
RegisterServiceCtrlHandlerA
CoInitializeEx
VariantClear
ICClose
strcmp
InstallRT
InstallSA
InstallSB
InstallServiceA
InstallServiceB
PSLIST
ServiceMain
UninstallRT
UninstallSA
UninstallSB
UninstallServiceA
UninstallServiceB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ