DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
XLUserS_CreateXunleiUserInstance
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Generic.8710286.11605.21205.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.Generic.8710286.11605.21205.dll
Resource
win10v2004-20230915-en
Target
SecuriteInfo.com.Trojan.Generic.8710286.11605.21205.dll
Size
1.4MB
MD5
54c43b68c08945cc84c7c859685d12a6
SHA1
811a19d339bf29d7b4d43b0ba3921f7288739aec
SHA256
3877d44471fa751f84da84d7ce2d1cd7c802c881e0bddc9227dd1b78c8176525
SHA512
705a85ecd47a7376bdb176976b082739d59ba4a2c142ba0e6b9ded356733712ede4f07b884346b44fc785efae264263a51749b684e426ce9c3887e71a939c3c9
SSDEEP
12288:AWTejoJJMXnNRuPg3wRBUZQxqpq30ChwDbonPltVwXU3GAIq2eE:XSsAnrcHRcQa11bUO0IqU
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
SecuriteInfo.com.Trojan.Generic.8710286.11605.21205.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSAGetLastError
lua_toboolean
PostQueuedCompletionStatus
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetWindowLongW
MessageBoxA
CoCreateInstance
VarBstrCmp
ord15
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
??1exception@std@@UAE@XZ
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
XLUserS_CreateXunleiUserInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ