capi_GetCurrentAppVersion
capi_GetPushStreamUrl
capi_GetSupportAppVersion
capi_Init
capi_UnInit
Behavioral task
behavioral1
Sample
050485c7dda353a41757745db9aabb025e190d960b3d641250e03dbcb26a0f11.dll
Resource
win7-20231201-en
Behavioral task
behavioral2
Sample
050485c7dda353a41757745db9aabb025e190d960b3d641250e03dbcb26a0f11.dll
Resource
win10v2004-20231201-en
Target
050485c7dda353a41757745db9aabb025e190d960b3d641250e03dbcb26a0f11
Size
5.6MB
MD5
19c5bc67c341a3f5f0e564bf2a63bbd8
SHA1
4237f0e61027d32e958bab15fa91faacc5c8e540
SHA256
050485c7dda353a41757745db9aabb025e190d960b3d641250e03dbcb26a0f11
SHA512
005053ccc046589728e25d9eefb6e9a8c06b3e151de0e2c8be1fb68be54a4914b5248f8b5bc2bbdc0cd58ff0e660aeb8ba39141a97a1bf069f8e097eaf543f48
SSDEEP
98304:Ql8suaIBaehgNK/ldAZQ53bZe/M3jMWnOI02eSSdp4bZUBQlmjS8zg0OLb7iCzOW:QGgG9c0rZTYDIbeSspI3uSLbWk
| resource | yara_rule |
|---|---|
| sample | vmprotect |
Checks for missing Authenticode signature.
| resource |
|---|
| 050485c7dda353a41757745db9aabb025e190d960b3d641250e03dbcb26a0f11 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UnmapViewOfFile
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
LookupPrivilegeValueW
GetFileVersionInfoSizeW
WTSSendMessageW
GetProcessWindowStation
GetProcessWindowStation
GetUserObjectInformationW
capi_GetCurrentAppVersion
capi_GetPushStreamUrl
capi_GetSupportAppVersion
capi_Init
capi_UnInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ