3???��?D?
3?��??����?����
dllok
��????������
��???��?����
Behavioral task
behavioral1
Sample
60923c91bbcb9a64c7c855971d2c9dfa494a1a1df2d3dc28852c88a90d273798.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
60923c91bbcb9a64c7c855971d2c9dfa494a1a1df2d3dc28852c88a90d273798.dll
Resource
win10v2004-20220812-en
Target
60923c91bbcb9a64c7c855971d2c9dfa494a1a1df2d3dc28852c88a90d273798
Size
904KB
MD5
0ad2231513739884cf530396c3d70eee
SHA1
f80f9e2a256bd36ea2fcd4361bb452519cbaeea7
SHA256
60923c91bbcb9a64c7c855971d2c9dfa494a1a1df2d3dc28852c88a90d273798
SHA512
4752093a7577a3f181b662c6a7e4d5ee48070259154ae19c1763824e71c375b72bd90027f987ff661e29025103e5fc95858335472c2d6183c02ee0a352e8cfc3
SSDEEP
24576:Q8Cn/kpVsaIZxx831ncLKx2c6H3UocBKilP08z+:QT/kEaIZxo1nc0SH3qG8z
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
waveOutPrepareHeader
recv
FindFirstFileA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
EnableWindow
GetWindowOrgEx
DocumentPropertiesA
RegCloseKey
SHGetSpecialFolderPathA
OleInitialize
RegisterTypeLi
ImageList_Destroy
GetSaveFileNameA
3???��?D?
3?��??����?����
dllok
��????������
��???��?����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ