LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
Behavioral task
behavioral1
Sample
8604a872a84efe5f6b1fb8952d093832b195f674e2d7c563afdcf13d01866dca.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
8604a872a84efe5f6b1fb8952d093832b195f674e2d7c563afdcf13d01866dca.exe
Resource
win10v2004-20231020-en
Target
8604a872a84efe5f6b1fb8952d093832b195f674e2d7c563afdcf13d01866dca
Size
9.8MB
MD5
c53bee1898359b57db771036e1a727e6
SHA1
fb86ec3cca6a9a44e06be781480620d895d70bd8
SHA256
8604a872a84efe5f6b1fb8952d093832b195f674e2d7c563afdcf13d01866dca
SHA512
5656db8a518ce486efb5c4b32ced232e7cb4eb922ebe73f6706a60d82cf8897c9c11134b9d6269a3d77445c39296a7a603246bc828d6364dfa1b4bf01a08ec40
SSDEEP
196608:jItng7jX03xr3s5xDmn3M/6zpjAU0ART8pm3LQQkmdyC7:jkng7jE3xr6D6MiX0qokNY
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
8604a872a84efe5f6b1fb8952d093832b195f674e2d7c563afdcf13d01866dca |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
SystemTimeToFileTime
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
StrStrA
GetDC
BitBlt
FreeSid
SHChangeNotify
VerQueryValueW
CM_Get_Parent
LoadEnvi
MemoryCompare
MemoryCopy
MemorySet
WndProc1
WndProc1_
WndProc2
WndProc2_
WndProc3
WndProc3_
_dllMain_Name@12
_mainB_@8
_mainW@16
_main_@4
main
main1
main5
mainB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE