_�����ڴ���ַ
_�ͷ��ڴ���ַ
����_url����
���ڴ���������_����
�ȼ���_ȡ����
�ȼ���_ȡ����
������֤����
Behavioral task
behavioral1
Sample
2f630165639a4e68483445fef9cfcab1fd32ce5492a7b1c52f92b5d92c7f23ca.dll
Resource
win7-20230831-en
Target
2f630165639a4e68483445fef9cfcab1fd32ce5492a7b1c52f92b5d92c7f23ca
Size
9.5MB
MD5
07af4dfe4b96a16b8be6ce9f81a79d23
SHA1
860e867db24af9f34b092c2a463e30ef0244a524
SHA256
2f630165639a4e68483445fef9cfcab1fd32ce5492a7b1c52f92b5d92c7f23ca
SHA512
917d2766ae8fdd76563d858b83f268af7fa6be0e9d42f579487aeb3b4865f6b072fb6bc83471d5a0abbc0559b23096523598aa4b39485e771bfff80fcfdd2dd4
SSDEEP
196608:p5t/Kbg6f6VGM4cwwDx/T8Nzn3iJiDfA9th14:p5kbgUcGM1wwYz3iJik97
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
2f630165639a4e68483445fef9cfcab1fd32ce5492a7b1c52f92b5d92c7f23ca |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
midiStreamClose
WSAGetLastError
GetVersion
GetVersionExA
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
UnregisterClassA
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
CreateRectRgn
OpenPrinterA
GetFileTitleA
RegCreateKeyExA
Shell_NotifyIconA
CLSIDFromProgID
SafeArrayAccessData
ImageList_DragEnter
WTSSendMessageW
_�����ڴ���ַ
_�ͷ��ڴ���ַ
����_url����
���ڴ���������_����
�ȼ���_ȡ����
�ȼ���_ȡ����
������֤����
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ