LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
Behavioral task
behavioral1
Sample
b333ab2ea62522f3d6d34d0fc55fab670300975407a30314c781164cca557682.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b333ab2ea62522f3d6d34d0fc55fab670300975407a30314c781164cca557682.dll
Resource
win10v2004-20220812-en
Target
b333ab2ea62522f3d6d34d0fc55fab670300975407a30314c781164cca557682
Size
60KB
MD5
2aea8d2b8ba137047f17607da96927cc
SHA1
730c11e52ad9daf14f67a04d7eda5f03cb44913c
SHA256
b333ab2ea62522f3d6d34d0fc55fab670300975407a30314c781164cca557682
SHA512
18de81af014bcb4077927d6befa61ced2f14aa095c6bb2864d8d3262589c5c65a51c9d3c841ea984fe9a6dbd8762d0b609ef17186e1284fa409092b7d03319c8
SSDEEP
1536:MTMW/BCkbZhmdwUWH2ZFlYTmmptfe5JIB:CMWJCobHUO2ZFih7oJE
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
SetWindowTextA
GetProcAddress
GetModuleHandleA
GetProcAddress
VirtualProtect
LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ