GetInstallDetailsPayload
SignalChromeElf
SignalInitializeCrashReporting
StartAntiLsp
Behavioral task
behavioral1
Sample
5604c6036a5c400ae7e3f458a3233f8133902d9a4599ae3f2fbb4e63783d0a19.dll
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
5604c6036a5c400ae7e3f458a3233f8133902d9a4599ae3f2fbb4e63783d0a19.dll
Resource
win10v2004-20231023-en
Target
5604c6036a5c400ae7e3f458a3233f8133902d9a4599ae3f2fbb4e63783d0a19
Size
1.3MB
MD5
af8d299e18515eb1aaf6b0cc9b5865ca
SHA1
c229ad38bd5ad1afdd8c9a53608cc48d8046714b
SHA256
5604c6036a5c400ae7e3f458a3233f8133902d9a4599ae3f2fbb4e63783d0a19
SHA512
ee1b7775e7af3646bebaefd04be0cd2cfdde847d2547630e263268dc850a0a4379756eaf13b6e4e22305232dfbb00afe673e7bb06f8139b8ddc4d30af692c8ab
SSDEEP
24576:QBR91N4boQt5YtrYep6ukgogysqfNccA0aPQcjC:mtNbuwHkQ2Ncka7j
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
5604c6036a5c400ae7e3f458a3233f8133902d9a4599ae3f2fbb4e63783d0a19 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HeapValidate
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetWindowRgn
MessageBoxA
CreateSolidBrush
GetSaveFileNameA
OpenPrinterA
RegCloseKey
DragQueryFileA
ImageList_SetOverlayImage
ord3
OleDestroyMenuDescriptor
ord253
VarDateFromStr
connect
GetInstallDetailsPayload
SignalChromeElf
SignalInitializeCrashReporting
StartAntiLsp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ