Init
UnInit
Behavioral task
behavioral1
Sample
95f176d5d0bd4016d6408cb022a278d1685d76bc4a1210fa44ffe8224efd3f60.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
95f176d5d0bd4016d6408cb022a278d1685d76bc4a1210fa44ffe8224efd3f60.dll
Resource
win10v2004-20230221-en
Target
95f176d5d0bd4016d6408cb022a278d1685d76bc4a1210fa44ffe8224efd3f60
Size
916KB
MD5
8be97b2b7057f8313f9adb9d0f6e00a6
SHA1
c7c4445fbf120500d845399a7365bb626f130510
SHA256
95f176d5d0bd4016d6408cb022a278d1685d76bc4a1210fa44ffe8224efd3f60
SHA512
6cc71c6c5b620115b85a0fd7427b0f559b10f718f833df18ba8805291f8506583aa189208892db9ad73a5bcafe90f85c340f87caaa496b74447fe7afcf20b761
SSDEEP
24576:AZ94cFvZrrt+DOiypfpB8Dr1s0O3hgYmZyMMRJcFyNG:AZ94cFvZMD8ppBUCZ3h9brrFNG
Processes:
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FindFirstFileExA
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
SetHookPlayObjectFilterStartOperateMessage
RtlInitializeCriticalSection
WSAGetLastError
ord60
CertCloseStore
CryptEncrypt
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
Init
UnInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ