DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.Win32.Sasfis.32568.23824.dll
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.Win32.Sasfis.32568.23824.dll
Resource
win10v2004-20231023-en
Target
SecuriteInfo.com.Trojan.Win32.Sasfis.32568.23824.dll
Size
2.0MB
MD5
734abb4dfff198dff85aff9bbaa42afd
SHA1
7e7b50bd82c6a4c40f94ddf8f75bad73f1f7409d
SHA256
2bdcd1fcd5c216e2b4178a896e8e2fdd99cc828ff5be79124ebd43f3cd6e2f5a
SHA512
15a2a561ecd7988887c075b7de3b9ed29549006c5be98af288f89818f74cd04379d28e0f7c3549725410753b1e0d85be1fc65d67db783ef4ff6dad9862ca74f2
SSDEEP
24576:vJBQ3BdlcO8cP6s9LBV2Oc0tQnrifaMp5RmgRnAdQ508jdbXbUJd:A3qOxyW2t0+rINLmgRnA2508jxUJ
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
SecuriteInfo.com.Trojan.Win32.Sasfis.32568.23824.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?SaveDoubleValue@CSplitHLP@@QAEHAAV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@N@Z
htonl
InternetCanonicalizeUrlW
Sleep
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
CreateWindowExW
MessageBoxA
RegQueryValueExW
CoCreateInstance
SafeArrayAccessData
ord11
PathFileExistsW
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
GetIpForwardTable
vswprintf_s
Netbios
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ