Tk_CreateConsoleWindow
Tk_Init
Tk_MainEx
Tk_SafeInit
Behavioral task
behavioral1
Sample
3204128050f7b8776f9a8b83b02dc37ccc9da7e419a41a9eb24c462599f6750a.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3204128050f7b8776f9a8b83b02dc37ccc9da7e419a41a9eb24c462599f6750a.dll
Resource
win10v2004-20230220-en
Target
3204128050f7b8776f9a8b83b02dc37ccc9da7e419a41a9eb24c462599f6750a
Size
424KB
MD5
80419bdcf343c4182718064e3f7cf998
SHA1
8fc12dbc879e86583b61d43e75a0a27900179302
SHA256
3204128050f7b8776f9a8b83b02dc37ccc9da7e419a41a9eb24c462599f6750a
SHA512
eeddb06cfb8462b796259a7cb9453b23111b1ccfa14d3a190c788e03074c73508440000fce66b1751e776b50a5ba2a79dbd826eff6ea8dee0f1a3bc0a7f77b5e
SSDEEP
12288:PCw8di2duWWnkwZLHwA/4iL3mqY2oYjC5uzQ3Ubih:kdtdutkmLHwAb2qboN5cg5
resource | yara_rule |
---|---|
sample | vmprotect |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FileTimeToLocalFileTime
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
RegisterClipboardFormatW
MessageBoxA
SetMapMode
GetFileTitleW
DocumentPropertiesW
RegSetValueExW
Shell_NotifyIconW
PathFindFileNameW
OleUIBusyW
CoRevokeClassObject
SysFreeString
Tk_CreateConsoleWindow
Tk_Init
Tk_MainEx
Tk_SafeInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ