Log
Logvido
RecordExceptionInfo
Behavioral task
behavioral1
Sample
4e03dd9d015447a3048f959269ba7c76.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
4e03dd9d015447a3048f959269ba7c76.dll
Resource
win10v2004-20231215-en
Target
4e03dd9d015447a3048f959269ba7c76
Size
276KB
MD5
4e03dd9d015447a3048f959269ba7c76
SHA1
47c9730720a9a1c8f2482e0a74584324332ca28a
SHA256
f350595d2630de15d8812479f78528d1322d7e776a686e429daea9e765cae108
SHA512
49b1d1ebc70c4ae376ee1686c4cf202a48e04f5edfcb0599e1287872c4649811b7f6fd43d85f47a61678c61d5b00cf58afa459641f03dd189c0f5a8db5f8e6b7
SSDEEP
6144:+V6mygAaHqJefAt1bC5gNIGHbcQl01qqVud1vLQ9w5Ede5:nmygDHqJe4t1W5gN5IfZVud1jgw5h
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
4e03dd9d015447a3048f959269ba7c76 |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetSystemTimeAsFileTime
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
Log
Logvido
RecordExceptionInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ