DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
XLUserS_CreateXunleiUserInstance
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.TR.Black.Gen2.2258.28712.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.TR.Black.Gen2.2258.28712.dll
Resource
win10v2004-20231020-en
Target
SecuriteInfo.com.Trojan.TR.Black.Gen2.2258.28712.dll
Size
1.4MB
MD5
9d9d376ea78a25e6e67f2fea0275f271
SHA1
96571dcd80bd3786e0faf72590e82eb4cf3a2a6c
SHA256
b2ff7ceeb95855266f83e24c4f733d4c01f8ed9a83448d9aa7a5b0bed1ceabbe
SHA512
1b84a976af652c9ed9af5e48d2ad7bce9c60a45360fabefd7a61e147376f95faeccc2ae3f7c7bbf575d544d0d0aeba61fa8b2ab6b999da8174d699511dfbe55a
SSDEEP
24576:yWHEdVpbdGgFcrb8+E4yLuSs9+3GX6Uv:zkdXdnas1yPsW
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
SecuriteInfo.com.Trojan.TR.Black.Gen2.2258.28712.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSARecv
GetAdaptersInfo
lua_tolstring
SetLastError
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
KillTimer
MessageBoxA
SHGetSpecialFolderPathA
CoCreateInstance
RegisterTypeLi
ord61
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
fread
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
XLUserS_CreateXunleiUserInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ