CInit
CUnInit
Behavioral task
behavioral1
Sample
40ee780bd009de0bac4ca96669dd68cd1295fc2372fccce377e36e270e220eab.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
40ee780bd009de0bac4ca96669dd68cd1295fc2372fccce377e36e270e220eab.dll
Resource
win10v2004-20230220-en
Target
40ee780bd009de0bac4ca96669dd68cd1295fc2372fccce377e36e270e220eab
Size
3.0MB
MD5
d733d53f95277a5e99f97d26d76b7307
SHA1
075ab76e425d96eb4d5a4c0cebd5c418c67f5d46
SHA256
40ee780bd009de0bac4ca96669dd68cd1295fc2372fccce377e36e270e220eab
SHA512
c4270a154ec49d06d7e297c04da034b0e71f6aa30396f3ce79e68b8c0d6ee82e9c4868fde8fd5f5e6b96936ae18451041d3ee741ccedcbf668a48fd242a94d23
SSDEEP
49152:+AtvlOStdLzdHxI5ByzNaHjHvCFf0dI0H8U/04HbWa6k/r6LT/3:DllOSTXdS4zRdXU/Hy3kz6LT/
Processes:
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
waveOutClose
select
RasGetConnectStatusA
CreateThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CopyRect
GetObjectA
OpenPrinterA
RegQueryValueExA
ShellExecuteA
OleInitialize
UnRegisterTypeLi
ord17
InternetConnectA
GetFileTitleA
CInit
CUnInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ