InstallHook
UninstallHook
Behavioral task
behavioral1
Sample
c23d23b86223211042baacb04b35975d160c25a49c2c220fdd17064fbcc17b12.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c23d23b86223211042baacb04b35975d160c25a49c2c220fdd17064fbcc17b12.dll
Resource
win10v2004-20220812-en
Target
c23d23b86223211042baacb04b35975d160c25a49c2c220fdd17064fbcc17b12
Size
584KB
MD5
e233d36f55a048bf96a668730e158b1c
SHA1
b20c613d196f6a15e49dbe4e53191225d42ef05e
SHA256
c23d23b86223211042baacb04b35975d160c25a49c2c220fdd17064fbcc17b12
SHA512
2a132a0fd183f20a9c6ef48e0a33cb453fb706056da5a65863a7cae4c75ae52a98a3d63fa434e5fcb2076ba69dbe85923c9714d271323d34660a50066dd6577b
SSDEEP
6144:a++4V2SKDVYAgv3BEqQhzNDvW9v5wlgInmCg0j2b2HTPlccgVsy13ub+L8:vmGFxEqUiR5s/m70jOweNyG3U+L
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
InstallHook
UninstallHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ