MIDLib_GetGameRoomCode
MIDLib_GetMachineId
Behavioral task
behavioral1
Sample
963bf12425452e9434abb06f0aacc28767434288c187a16f88ca9bb502fb13dd.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
963bf12425452e9434abb06f0aacc28767434288c187a16f88ca9bb502fb13dd.dll
Resource
win10v2004-20231215-en
Target
963bf12425452e9434abb06f0aacc28767434288c187a16f88ca9bb502fb13dd
Size
7.9MB
MD5
617a275605839c823995a5b52faaa741
SHA1
e6f32f1beed1a90d660dc269f749c80287fea47b
SHA256
963bf12425452e9434abb06f0aacc28767434288c187a16f88ca9bb502fb13dd
SHA512
5c3ee5561192710520495214116ab93fda6d39a347682a0fe07d9ea048521580b7e181ee4b0c6086ee4344e5c4b85032c1d4fe5255694c5925f9e8c7777612ef
SSDEEP
196608:uDLbpBz+6Z+/vNzV3qxoWO3iNWSI+TC6RePSTk:KbpVANzV34zZTCcq
| resource | yara_rule |
|---|---|
| sample | vmprotect |
Checks for missing Authenticode signature.
| resource |
|---|
| 963bf12425452e9434abb06f0aacc28767434288c187a16f88ca9bb502fb13dd |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
LoadLibraryA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
EnumWindows
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
CreateSolidBrush
RegCloseKey
ShellExecuteA
inet_ntoa
InternetOpenA
Direct3DCreate9
D3DXCreateTexture
DwmExtendFrameIntoClientArea
ImmReleaseContext
WTSSendMessageW
MIDLib_GetGameRoomCode
MIDLib_GetMachineId
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ