CSP_GetCmd
CSP_GetNameTax
CSP_GetRandom
CSP_GetToken
CSP_MonitorDev
CSP_SendToken
Behavioral task
behavioral1
Sample
26eda5a2973658075e0145e51ae939cb.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
26eda5a2973658075e0145e51ae939cb.dll
Resource
win10v2004-20231215-en
Target
26eda5a2973658075e0145e51ae939cb
Size
515KB
MD5
26eda5a2973658075e0145e51ae939cb
SHA1
10fd83ec91734f86acb45152bde94249dbe82560
SHA256
fb50541c5b3db9dcc438f58038f7eadfc982d981af4c4dba147ec0664157491e
SHA512
d0a5f41a37339d6562156b23ad58dc40aad6b5171d9ca574ba175eefb0c669893e744d92d55dde5bf2a8e9bda06132f2531b6bfebf7696829f66f7c0ac2dff73
SSDEEP
12288:ekFZh17KmahQFXY/jNh2FEKo+m2wG5saBoSGU3Y:ekvj7d+/uuUTUa+PUo
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
26eda5a2973658075e0145e51ae939cb |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CertNameToStrA
GetVersionExA
GlobalAddAtomA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
EnableWindow
OffsetViewportOrgEx
GetFileTitleA
OpenPrinterA
RegQueryValueExA
PathFindExtensionA
CoCreateGuid
SysAllocStringLen
InternetSetOptionExA
CSP_GetCmd
CSP_GetNameTax
CSP_GetRandom
CSP_GetToken
CSP_MonitorDev
CSP_SendToken
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ