CPU
ZZ
cpuid
ex
iptes
��·
Behavioral task
behavioral1
Sample
c40fc5156a8206db8aac5139fcb7b4632f382e373f1de38b7723938ec96ce966.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
c40fc5156a8206db8aac5139fcb7b4632f382e373f1de38b7723938ec96ce966.dll
Resource
win10v2004-20230915-en
Target
c40fc5156a8206db8aac5139fcb7b4632f382e373f1de38b7723938ec96ce966
Size
8.4MB
MD5
02e340a1509e62dd293f6e3ba06d336a
SHA1
8b3f6576f9841b636572b9f8fae4d7eaccd71d41
SHA256
c40fc5156a8206db8aac5139fcb7b4632f382e373f1de38b7723938ec96ce966
SHA512
afca4ac977941933bb41d1fa54523875455759b28ea6d6f08ca3fb6de9e9065b7e34c689ebd0702f4facaecc00e7d426df8b20518a5c72e16ba6990f40b2664c
SSDEEP
196608:gFINes2otdfeTHlaYtRO56rgikohhgH2tb64Kl513:guNes2ot1eTHAYtI5QgiNhhB84Kl
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
c40fc5156a8206db8aac5139fcb7b4632f382e373f1de38b7723938ec96ce966 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
midiStreamRestart
inet_ntoa
GetVersion
GetVersionExA
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetSysColorBrush
ExtSelectClipRgn
OpenPrinterA
RegQueryValueA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
ShellExecuteA
OleInitialize
UnRegisterTypeLi
ImageList_Destroy
GetOpenFileNameA
CPU
ZZ
cpuid
ex
iptes
��·
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ