DNF_�����
������
��ƫ��
����
���봰��
Behavioral task
behavioral1
Sample
75d2f5917e8c0f0598f9b9c4fcc86cdf44b88ac71d980d390612bb8f32103aca.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
75d2f5917e8c0f0598f9b9c4fcc86cdf44b88ac71d980d390612bb8f32103aca.dll
Resource
win10v2004-20221111-en
Target
75d2f5917e8c0f0598f9b9c4fcc86cdf44b88ac71d980d390612bb8f32103aca
Size
556KB
MD5
7ddcdd885c94d494af87dd403418e360
SHA1
47c3af408d03eb6cb6b0b6616b9cd36fa871a9ab
SHA256
75d2f5917e8c0f0598f9b9c4fcc86cdf44b88ac71d980d390612bb8f32103aca
SHA512
74d2f86b14cff49624f73069fa59412f04997388dd46d78cc28f6743d59bc0031ab42e73fb1ba808e80cec7b85be30f9fe57b1807a80433e3ae67ba7264608cc
SSDEEP
12288:nN0kSgx5U37HZsYYxJ9Nf5Rh3YlQFxh9YFeJpFeB4PJzOgP:n4gk9snGlQFxh5pU4PlOU
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
midiStreamRestart
WSAAsyncSelect
SetLastError
GetModuleHandleA
GetProcAddress
VirtualProtect
LoadImageA
SetWindowExtEx
OpenPrinterA
RegOpenKeyExA
SHGetSpecialFolderPathA
OleInitialize
LoadTypeLi
ord17
GetSaveFileNameA
DNF_�����
������
��ƫ��
����
���봰��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ