SetToOpen
SetUninstall
trim
Behavioral task
behavioral1
Sample
9dd02c3a418aa05258309970db8b66f40a49a5a08d6dad0e649daaf63f474cb4.dll
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9dd02c3a418aa05258309970db8b66f40a49a5a08d6dad0e649daaf63f474cb4.dll
Resource
win10v2004-20220812-en
Target
9dd02c3a418aa05258309970db8b66f40a49a5a08d6dad0e649daaf63f474cb4
Size
688KB
MD5
5bd9dfd2eedd143a341ac98a57f755ea
SHA1
4a9b5800dc7e5ea3dedaebe6aa7d2a34299c1c20
SHA256
9dd02c3a418aa05258309970db8b66f40a49a5a08d6dad0e649daaf63f474cb4
SHA512
6a9a5a0130157458e8f30bbd432b89d2611fd3d41c7119639ac0daf723f3c5a138fd34f2da0a776dd1599be2b6b8b442ae1dafb77a56c25814fb2401b2f5e15b
SSDEEP
12288:E45UPCaChK/lmbQqLmZuwHi+XI4z1gd/Ux0oHWDVRSSKJhldavmaC1iIvnzpb7nR:v5faCh8OQqLmlXIe4Mx0NDD60vmaC82h
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetModuleHandleW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetSysColor
SetMapMode
ClosePrinter
RegCloseKey
PathFindExtensionA
VariantInit
EnumProcessModules
SetToOpen
SetUninstall
trim
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ