ijlErrorStr
ijlFree
ijlGetLibVersion
ijlInit
ijlRead
ijlWrite
Behavioral task
behavioral1
Sample
c3825ed9a12b5215bcb80041f1aecfa5692ae02300bee50eb1ba17c88801277d.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c3825ed9a12b5215bcb80041f1aecfa5692ae02300bee50eb1ba17c88801277d.dll
Resource
win10v2004-20230915-en
Target
c3825ed9a12b5215bcb80041f1aecfa5692ae02300bee50eb1ba17c88801277d
Size
15.4MB
MD5
7fa0724fbf24a77e37b5223ab8675f3a
SHA1
1b1c1375440b105604bf61c2c6f7729e5d267e3c
SHA256
c3825ed9a12b5215bcb80041f1aecfa5692ae02300bee50eb1ba17c88801277d
SHA512
ea848a02cdee3d848a737a29228d7c78641b1f654795cb2be846f72dd880d4a01ce16c7cbe0f3b02580429754317aca5b3de39ec7a2d360a6a646a47b31d1f72
SSDEEP
196608:xdYGf7ZiqnwoZ0Ch5hGv/tIroDnwhrSkAaWqbLbHXhhVG3sXYDxnHKlhBq+a1ziJ:XfwK006yoTwhrpABshW8XYVHG1ahKt
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
c3825ed9a12b5215bcb80041f1aecfa5692ae02300bee50eb1ba17c88801277d |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Direct3DCreate8
CreateFileMappingA
K32GetModuleInformation
GetTickCount64
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
QueryPerformanceFrequency
FreeLibrary
K32GetProcessMemoryInfo
DuplicateHandle
GetCurrentDirectoryW
IsWow64Process
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCurrentThread
CreateFileW
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualFree
SetLastError
GetModuleHandleW
LoadLibraryExW
WriteFile
GetModuleHandleA
IsProcessorFeaturePresent
GetProcessHeap
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
GetFileSizeEx
FlushFileBuffers
LCMapStringW
OutputDebugStringW
HeapReAlloc
HeapAlloc
HeapFree
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
ExitProcess
ReadFile
WriteConsoleW
GetModuleHandleExW
GetFileType
GetStdHandle
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InterlockedFlushSList
RtlUnwind
RaiseException
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
GetModuleFileNameA
DisableThreadLibraryCalls
MapViewOfFile
HeapSize
CloseHandle
CreateFileA
K32EmptyWorkingSet
WritePrivateProfileStringA
Sleep
LoadLibraryA
GetProcAddress
VirtualQuery
VirtualProtect
VirtualAlloc
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
GetLastError
GetCurrentDirectoryA
SetStdHandle
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
GetCPInfo
LocalFree
FormatMessageA
FindClose
FindFirstFileExW
FindNextFileW
SetEndOfFile
SetFilePointerEx
AreFileApisANSI
MoveFileExW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
GetStringTypeW
GetVersionExA
VirtualQuery
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
LoadLibraryA
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
FreeLibrary
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFree
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCommandLineA
RaiseException
RtlUnwind
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetMessageA
PostQuitMessage
RegisterClassA
CreateWindowExA
DispatchMessageA
TranslateMessage
GetCursorPos
ShowWindow
GetWindowTextW
LoadCursorA
ScreenToClient
SetCursor
GetForegroundWindow
GetCapture
IsChild
TrackMouseEvent
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
ClientToScreen
FlashWindowEx
SetCursorPos
ReleaseCapture
SetCapture
GetAsyncKeyState
GetDesktopWindow
GetWindowRect
UpdateWindow
SetLayeredWindowAttributes
DestroyWindow
UnregisterClassA
PeekMessageA
SetWindowLongA
GetWindowLongA
GetClientRect
EndPaint
BeginPaint
SetWindowPos
DefWindowProcA
GetProcessWindowStation
GetUserObjectInformationW
CharUpperBuffW
MessageBoxW
GetStockObject
SelectObject
TextOutA
SetBkColor
CreateSolidBrush
RegCloseKey
RegSetValueExW
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
ShellExecuteA
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
DwmExtendFrameIntoClientArea
WTSSendMessageW
ijlErrorStr
ijlFree
ijlGetLibVersion
ijlInit
ijlRead
ijlWrite
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE