scanCook
scanbegin
Behavioral task
behavioral1
Sample
932d594dadb9040a5906a9ec926cde8dd38fdcaf14e77003e218bf95f81dc561.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
932d594dadb9040a5906a9ec926cde8dd38fdcaf14e77003e218bf95f81dc561.dll
Resource
win10v2004-20221111-en
Target
932d594dadb9040a5906a9ec926cde8dd38fdcaf14e77003e218bf95f81dc561
Size
468KB
MD5
76f57c475f842e69b827f50ec0ed2390
SHA1
e6ff5c12f478ae921029109ba74c2733bae7002f
SHA256
932d594dadb9040a5906a9ec926cde8dd38fdcaf14e77003e218bf95f81dc561
SHA512
9403076a6315b3829143d77b0bd0cfab1a0671daec766342b8ee11bf40f00ec41d7d884af96036d69112f80cdb737f646f1bce402ee6323ee2e3257f72f3949d
SSDEEP
12288:lmLNjr+Jk3j4mXUUs4EuH7JG5HtFDxygmxaNE:l2r+u0IUUs4Hg5NpxygmxaC
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
CreateProcessW
GetModuleHandleA
GetProcAddress
VirtualProtect
?uncaught_exception@std@@YA_NXZ
?what@exception@std@@UBEPBDXZ
WSAAsyncSelect
CoCreateInstance
SetTimer
OpenProcessToken
GetModuleFileNameExA
scanCook
scanbegin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ