3?��??��
???a?��?��
Q546528533
Behavioral task
behavioral1
Sample
ca686cf16e1ef1b2e55b723d3181a02b6b40d49dc6e4e77443eb8aac45c6cb6d.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
ca686cf16e1ef1b2e55b723d3181a02b6b40d49dc6e4e77443eb8aac45c6cb6d.dll
Resource
win10v2004-20230915-en
Target
ca686cf16e1ef1b2e55b723d3181a02b6b40d49dc6e4e77443eb8aac45c6cb6d
Size
764KB
MD5
8a0f571c5caa65a084dc067f851d9d26
SHA1
fa692db196aa6d82335bf0d81be938f81a73f2bc
SHA256
ca686cf16e1ef1b2e55b723d3181a02b6b40d49dc6e4e77443eb8aac45c6cb6d
SHA512
4bd2dde0a9412877d066e1362fdb854158dd69dbbd0ec6414ad20a907aba2ada0fd22d4cc08b707d25c00e6d45b9270a0df41a0033484ea74ab985c0ed3011f1
SSDEEP
12288:bpOZW+jdrqkDFbjaXSHClHG7WkPQGawgNSw75kUrYkhr4YoNgmJvxNrDHibJ8ytc:b3SPR/Ji87CggNSm61kh44O5Nr+uytoJ
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
ca686cf16e1ef1b2e55b723d3181a02b6b40d49dc6e4e77443eb8aac45c6cb6d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersion
GetVersionExA
GetProfileStringA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CloseClipboard
ExtTextOutA
midiStreamOpen
ClosePrinter
RegCreateKeyExA
ShellExecuteA
CLSIDFromString
UnRegisterTypeLi
ImageList_Destroy
recv
GetOpenFileNameA
3?��??��
???a?��?��
Q546528533
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ