?a?��
?��?��
?����?��???��y
?������CALL
asm_?��??D��?����?
asm_?����??��?��?����?
asm_D��??D��?����?
��?Z��?����
Behavioral task
behavioral1
Sample
9e486c749b112e5fe2f7e9c7f2f753bb0d802bc293b07dee02e109cc93a614b8.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e486c749b112e5fe2f7e9c7f2f753bb0d802bc293b07dee02e109cc93a614b8.dll
Resource
win10v2004-20220812-en
Target
9e486c749b112e5fe2f7e9c7f2f753bb0d802bc293b07dee02e109cc93a614b8
Size
944KB
MD5
7f17cd3a0f06bcd2a8427e4d26a93523
SHA1
16dd8b833ea9abe90214b3fa866385da2a83c348
SHA256
9e486c749b112e5fe2f7e9c7f2f753bb0d802bc293b07dee02e109cc93a614b8
SHA512
6a8ea590a803d46bff4f4cac4c54432498b975e3451729502b5edcc13e75d46543fd897c9b0168b892fa88b4d2a56d167551c1f309e16e6d6c29c7c5f34ef666
SSDEEP
24576:dmbeBr9926yqePHK/gkIIY1NdHoJ2ROVxlIZC371:dtwlvK/gxBdIIRfC3p
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
TerminateProcess
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CreateIconFromResourceEx
MessageBoxA
OffsetViewportOrgEx
midiOutReset
ClosePrinter
RegCreateKeyExA
Shell_NotifyIconA
OleInitialize
LoadTypeLi
ord17
WSAAsyncSelect
GetOpenFileNameA
?a?��
?��?��
?����?��???��y
?������CALL
asm_?��??D��?����?
asm_?����??��?��?����?
asm_D��??D��?����?
��?Z��?����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ