ijlErrorStr
ijlFree
ijlGetLibVersion
ijlInit
ijlRead
ijlWrite
Behavioral task
behavioral1
Sample
88d0930ee88dad66652710330e9b846487d4df9c68d420d022f9a5ce656089b5.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
88d0930ee88dad66652710330e9b846487d4df9c68d420d022f9a5ce656089b5.dll
Resource
win10v2004-20230915-en
Target
88d0930ee88dad66652710330e9b846487d4df9c68d420d022f9a5ce656089b5
Size
11.4MB
MD5
4d5505b5e1b131471aa422fa7fff6ab6
SHA1
1c754da65fa3c0a7e9a73de5dcabfa312146685f
SHA256
88d0930ee88dad66652710330e9b846487d4df9c68d420d022f9a5ce656089b5
SHA512
048343a96fb439af293260856470739e5b45249eeca95acb46266a0ab9d68176b68268eafb903891991d1e11efd31160286895f349f055360f806c5551de9599
SSDEEP
196608:ltxKFEX9AxRsNq42cWNOmB/E8Cd7WjG8iuOLH8cgl:9KmFV2ckLM8CVr8iutl
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
88d0930ee88dad66652710330e9b846487d4df9c68d420d022f9a5ce656089b5 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
QueryPerformanceCounter
QueryPerformanceFrequency
FreeLibrary
K32EmptyWorkingSet
K32GetProcessMemoryInfo
DuplicateHandle
IsWow64Process
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCurrentThread
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualFree
SetLastError
GetModuleHandleW
LoadLibraryExW
WriteFile
CreateFileW
K32GetModuleInformation
IsProcessorFeaturePresent
GetOEMCP
CreateFileMappingA
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
OutputDebugStringW
MoveFileExW
DecodePointer
LCMapStringW
HeapReAlloc
HeapAlloc
HeapFree
ExitProcess
ReadFile
WriteConsoleW
GetModuleHandleExW
GetFileType
GetStdHandle
GetCPInfo
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
InterlockedFlushSList
RtlUnwind
RaiseException
InitializeSListHead
GetSystemTimeAsFileTime
SetStdHandle
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
DisableThreadLibraryCalls
MapViewOfFile
CloseHandle
CreateFileA
LoadLibraryA
GetProcAddress
VirtualQuery
VirtualProtect
VirtualAlloc
GetCurrentProcess
GetLastError
GetStringTypeW
GetProcessHeap
GetCurrentDirectoryA
HeapSize
GetACP
SetEndOfFile
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
TerminateProcess
GetCurrentProcessId
GetVersionExA
VirtualQuery
GetSystemTimeAsFileTime
GetModuleHandleA
CreateEventA
GetModuleFileNameW
LoadLibraryA
TerminateProcess
GetCurrentProcess
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
WriteProcessMemory
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualFree
GetProcessAffinityMask
SetProcessAffinityMask
GetCurrentThread
SetThreadAffinityMask
Sleep
FreeLibrary
GetTickCount
SystemTimeToFileTime
FileTimeToSystemTime
GlobalFree
LocalAlloc
LocalFree
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
LoadResource
MultiByteToWideChar
FindResourceExW
FindResourceExA
WideCharToMultiByte
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
CreateFileW
LoadLibraryW
GetLastError
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetCommandLineA
RaiseException
RtlUnwind
HeapFree
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
WriteFile
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
LoadCursorA
ScreenToClient
SetCursor
SetCursorPos
GetForegroundWindow
GetCapture
TrackMouseEvent
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
ClientToScreen
GetCursorPos
ReleaseCapture
SetCapture
GetAsyncKeyState
GetWindowRect
SetWindowLongA
GetWindowLongA
GetClientRect
EndPaint
BeginPaint
SetWindowPos
FlashWindowEx
ShowWindow
CreateWindowExA
RegisterClassA
PostQuitMessage
DefWindowProcA
DispatchMessageA
TranslateMessage
GetMessageA
GetWindowTextW
IsChild
GetProcessWindowStation
GetUserObjectInformationW
CharUpperBuffW
MessageBoxW
CreateSolidBrush
GetStockObject
SelectObject
TextOutA
SetBkColor
RegOpenKeyExA
RegSetValueExW
RegQueryValueExA
RegOpenKeyA
RegCloseKey
ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext
WTSSendMessageW
ijlErrorStr
ijlFree
ijlGetLibVersion
ijlInit
ijlRead
ijlWrite
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE