ServiceMain
ServiceMainManual
Behavioral task
behavioral1
Sample
16c780fbb09cd5abcb5c57828b73231d.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
16c780fbb09cd5abcb5c57828b73231d.dll
Resource
win10v2004-20231215-en
Target
16c780fbb09cd5abcb5c57828b73231d
Size
151KB
MD5
16c780fbb09cd5abcb5c57828b73231d
SHA1
bf7e90495efe15c6f56d32bc9dd795e53feaa4ef
SHA256
840961ef4f319562ec92438382c6624821f788b4f4c4f7d32cd4607b2a1c658c
SHA512
46d1d7e4c742e0bdaa74ace5a193e8bde00ce11e4154196c8b2cd79a2d2376ff7a086b5c6e33b80c29bda5770a603ebec200c81676d01df8020e928ec90614f5
SSDEEP
3072:ynLM2M199F5TaGmrZ35Y4g3/r7f2GN/8S203fe7L6R1fgMMT2SIHJH:yLPU0rZS1/f2GNS03f3R1pM
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
16c780fbb09cd5abcb5c57828b73231d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA
wsprintfA
MessageBoxA
ServiceMain
ServiceMainManual
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ