RunDllHostCallBack
������������
����
Behavioral task
behavioral1
Sample
f7f43f8ed58fb83b5b67c1d133df1dbde96d0483332af9ec950bb6a6cf16baa6.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f7f43f8ed58fb83b5b67c1d133df1dbde96d0483332af9ec950bb6a6cf16baa6.dll
Resource
win10v2004-20221111-en
Target
f7f43f8ed58fb83b5b67c1d133df1dbde96d0483332af9ec950bb6a6cf16baa6
Size
696KB
MD5
a176e5fbef08a4d2cf2a2ddf7fef6315
SHA1
9597393a431661bdf759622af831d85cf1eb3903
SHA256
f7f43f8ed58fb83b5b67c1d133df1dbde96d0483332af9ec950bb6a6cf16baa6
SHA512
b44d5181ea0385cf3dee24bc791e0304d10ce79d13b5bf2394750d36db39161f26c6d50e3282b5b2fccf89684ae0c7ffb34c2d16ae648ad9e6571767dc789f3a
SSDEEP
12288:EaUbU3Sc91eph4zlt2YKzjv9tZYJugIwS42YQbIOGASb8YehUBOw9GrdTC:EaUbUCW1efUkYKzjHZougz1BESb/emBJ
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IsBadCodePtr
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
OpenClipboard
MessageBoxA
CreateRectRgnIndirect
waveOutReset
ClosePrinter
RegCreateKeyExA
Shell_NotifyIconA
OleUninitialize
LHashValOfNameSys
ImageList_Destroy
ioctlsocket
GetFileTitleA
RunDllHostCallBack
������������
����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ