?��?��
?����?��???��y
?������CALL
asm_?��??D��?����?
asm_?����??��?��?����?
asm_D��??D��?����?
��?Z��?����
Behavioral task
behavioral1
Sample
c7617e6c95f63d646a476b134ed9d4e50a4b88a4d44fc73c172efe7ca5c58f55.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c7617e6c95f63d646a476b134ed9d4e50a4b88a4d44fc73c172efe7ca5c58f55.dll
Resource
win10v2004-20220812-en
Target
c7617e6c95f63d646a476b134ed9d4e50a4b88a4d44fc73c172efe7ca5c58f55
Size
948KB
MD5
9efb5cd4417774092c04db240eb032c2
SHA1
833c366b69f5f6bb1349aab053177fa876a49a99
SHA256
c7617e6c95f63d646a476b134ed9d4e50a4b88a4d44fc73c172efe7ca5c58f55
SHA512
5700366e46023d4fa65ece1c44303c682288080f4d9f58eb009811395d127a21da89e831099760be36f5c70a273c1700ceb2586c65485598785ef29881faaddf
SSDEEP
24576:DAfAqkKADwGdHAWVmzmlJjo/7mqzmXkCqIZ+cfxtMB1:ppsKHNmzmlJUTIfdfxtM
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
GlobalDeleteAtom
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetFocus
MessageBoxA
SetWindowOrgEx
midiStreamOpen
OpenPrinterA
RegSetValueExA
Shell_NotifyIconA
OleUninitialize
RegisterTypeLi
ImageList_Destroy
ioctlsocket
GetFileTitleA
?��?��
?����?��???��y
?������CALL
asm_?��??D��?����?
asm_?����??��?��?����?
asm_D��??D��?����?
��?Z��?����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ