?GetAllNetInfo@@YA?AV?$vector@UwiScanNetInfo@@V?$allocator@UwiScanNetInfo@@@std@@@std@@XZ
?GetUsbNetInfo@@YA?AUwiScanNetInfo@@XZ
Behavioral task
behavioral1
Sample
d522b1ff0375fe58f995d7eb9e50432048fd667fd88a3b567f9e9d6915f9d8ce.dll
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d522b1ff0375fe58f995d7eb9e50432048fd667fd88a3b567f9e9d6915f9d8ce.dll
Resource
win10v2004-20221111-en
Target
d522b1ff0375fe58f995d7eb9e50432048fd667fd88a3b567f9e9d6915f9d8ce
Size
1.9MB
MD5
2e44ff1c25588f4c7fa88dba63443634
SHA1
6d615f23a6e44d87e24f6f9ce3029f1296d5b8a1
SHA256
d522b1ff0375fe58f995d7eb9e50432048fd667fd88a3b567f9e9d6915f9d8ce
SHA512
fb5d8357fb1cf4592de5447741149695f3ac27875c0d6db3d535a7c1d9fa5ca5e0c9beb38311e1bd171ed74c3980b75ad32aa0e4e928059e42c4fd0d2bc30e87
SSDEEP
49152:Mn8zEp7qd3Rvaav5wfPfCekbWV9hwurzTxMMCBupkePdC0j:U8z2qdhC+yHr+ixMMCBuph
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
?LOGI@@YAXPBDZZ
RegOpenKeyA
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
GetAdaptersInfo
SetEvent
GetCurrentProcess
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
WTSSendMessageW
CharUpperBuffW
?GetAllNetInfo@@YA?AV?$vector@UwiScanNetInfo@@V?$allocator@UwiScanNetInfo@@@std@@@std@@XZ
?GetUsbNetInfo@@YA?AUwiScanNetInfo@@XZ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ