DPS
����_IDȡ���ھ���2
Behavioral task
behavioral1
Sample
50c9213ecdba0ce8029d55f87598fe5d3107ed58347ac6bedde3851c152e16e1.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
50c9213ecdba0ce8029d55f87598fe5d3107ed58347ac6bedde3851c152e16e1.dll
Resource
win10v2004-20230915-en
Target
50c9213ecdba0ce8029d55f87598fe5d3107ed58347ac6bedde3851c152e16e1
Size
2.8MB
MD5
cc50f8473ee29b9ee7536e1a6eb8cd10
SHA1
404c24ad648c5899dac3c5b94db6968362d610e3
SHA256
50c9213ecdba0ce8029d55f87598fe5d3107ed58347ac6bedde3851c152e16e1
SHA512
2fb3286192fdbb409cba35893a001b183451fa07bc0df020ed834e7a03456a01e977c5827c4ad70aa250559e9a6a3ca4d55a0d8acf0600a61aae8fc562523f01
SSDEEP
49152:lRcsagpdUoEPznXQe+jQPma53Qh2bJbKvm8mYrxUGrw6Jg3jwMf1CMPN:kXrLnXNOaWh8bum8mYrzrdCwMNb
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
50c9213ecdba0ce8029d55f87598fe5d3107ed58347ac6bedde3851c152e16e1 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersion
GetVersionExA
GetCurrentProcess
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
OpenClipboard
CharUpperBuffW
SetROP2
midiStreamStop
OpenPrinterA
RegQueryValueA
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
ShellExecuteA
OleInitialize
UnRegisterTypeLi
ImageList_Destroy
WSAAsyncSelect
GetOpenFileNameA
WTSSendMessageW
DPS
����_IDȡ���ھ���2
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ