deinit_dll
dispatcher
init_dll
Behavioral task
behavioral1
Sample
a661508fb27c86ef865cd72c696d3956b006ec231c261bf31693b4a07d926141.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a661508fb27c86ef865cd72c696d3956b006ec231c261bf31693b4a07d926141.dll
Resource
win10v2004-20220812-en
Target
a661508fb27c86ef865cd72c696d3956b006ec231c261bf31693b4a07d926141
Size
96KB
MD5
305b4c6d4d587aedaa1e2e3620dc768e
SHA1
f662bcc04d57b9c1de2769074ae7d57f4be359f6
SHA256
a661508fb27c86ef865cd72c696d3956b006ec231c261bf31693b4a07d926141
SHA512
b82040e39bda515cac12e8ab9586f98f92125eb5bc80ba1547944363ff133bcb0b859289bf9b6b3898a9b034789a23ebd29ea7201de16e7597b24a11ca252126
SSDEEP
1536:xM8QlaL0Rsyvk3IUxwjzEEVSycq13D3DAbVOM9q27t9abmbUmxw4ZXID:xYc0RszRCoES613D3uES57tkb6bZXQ
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GetCommandLineA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxA
MessageBoxA
deinit_dll
dispatcher
init_dll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ