GFDTRDSRTU
����
Behavioral task
behavioral1
Sample
0c60d77a57ebf7fa66c6dd7a3259d81d8fba65340926cadc23301b402035d0bf.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0c60d77a57ebf7fa66c6dd7a3259d81d8fba65340926cadc23301b402035d0bf.dll
Resource
win10v2004-20220812-en
Target
0c60d77a57ebf7fa66c6dd7a3259d81d8fba65340926cadc23301b402035d0bf
Size
504KB
MD5
83d1a69c4dbda1fe6bc258808dc39650
SHA1
3b60abbb1457ebb95c82ab38d76ed1edb62758a0
SHA256
0c60d77a57ebf7fa66c6dd7a3259d81d8fba65340926cadc23301b402035d0bf
SHA512
999eb66e87aec0c496427e9a5cf859871582ae844106ade0077825c443bb12cbcccff50c159e2463d2f211a69023b58a7eea93148975cfbf32a6e72a4ffb81ca
SSDEEP
12288:u+2EBqYewTpgsFvgs2pNlfvsK0gZjAnCx1wkMqRvMk4LcbY4L/6VU:i+99fF4s2/lfvsyZjAnCxuERMk4MM2
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
midiStreamRestart
WSAAsyncSelect
SetLastError
GetModuleHandleA
GetProcAddress
VirtualProtect
LoadImageA
SetWindowExtEx
OpenPrinterA
RegOpenKeyExA
SHGetSpecialFolderPathA
OleInitialize
LoadTypeLi
ord17
GetSaveFileNameA
GFDTRDSRTU
����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ