����
��Ѫ
����1
����
ɵ��
ԭ�ظ�����״̬
�ӳ���1
Behavioral task
behavioral1
Sample
d57d348ccf047fad8e28b09988594295629af1633122f6ed0a01f45f909136c0.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d57d348ccf047fad8e28b09988594295629af1633122f6ed0a01f45f909136c0.dll
Resource
win10v2004-20221111-en
Target
d57d348ccf047fad8e28b09988594295629af1633122f6ed0a01f45f909136c0
Size
564KB
MD5
1eb05bf0e6b0dcb93461b8b180707c13
SHA1
95460aa322477bf19800909cd00a92e4e06f3f05
SHA256
d57d348ccf047fad8e28b09988594295629af1633122f6ed0a01f45f909136c0
SHA512
b1c67d6360b06661acb4bb913f1b9ddd658409582f1a4519c580ce86f20554a05e78acf8c08fe97d7cf404c4a0a6196e66e4f0f802464e49f1de6219a0ff3360
SSDEEP
12288:15504b8+X6WvTRDNt7K2Qe0n/JOEYD/hJZ/qElZfORNv:15LbVX6aNU2QfJAD/5q+ZfORN
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
midiStreamRestart
WSAAsyncSelect
GetTimeZoneInformation
GetModuleHandleA
GetProcAddress
VirtualProtect
EnableMenuItem
ScaleViewportExtEx
OpenPrinterA
RegQueryValueExA
ShellExecuteA
OleInitialize
LoadTypeLi
ord17
GetSaveFileNameA
����
��Ѫ
����1
����
ɵ��
ԭ�ظ�����״̬
�ӳ���1
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ