BR_Send
BR_SetSvrAckHandler
BR_SetSvrIP
BR_UserInit
Behavioral task
behavioral1
Sample
83d30df3283d8ad2204ee3e8ee0f2032dba656e3888388ae7b6fd6d5fa9fdca2.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
83d30df3283d8ad2204ee3e8ee0f2032dba656e3888388ae7b6fd6d5fa9fdca2.dll
Resource
win10v2004-20231222-en
Target
83d30df3283d8ad2204ee3e8ee0f2032dba656e3888388ae7b6fd6d5fa9fdca2
Size
524KB
MD5
9e133026d4b8ada47b478464f75ac21d
SHA1
458a729b0e4c592c3dea9be98b2e38decfc4398c
SHA256
83d30df3283d8ad2204ee3e8ee0f2032dba656e3888388ae7b6fd6d5fa9fdca2
SHA512
7cccdf1bda0077f2aaa1c55212baa929ac6ecad38ac4d9d497b35ab4672c3d9ebdb353d8a3ba3055a6dfd60812910ec1bf6f4107cb1af11791193b7c67af998b
SSDEEP
12288:j3ywUrv2Pivw6MQpb8XCgpIKe0/vleo7GnD1nK8cENbmu:j3DUrOPJgbOpxrlRQDrrIu
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
83d30df3283d8ad2204ee3e8ee0f2032dba656e3888388ae7b6fd6d5fa9fdca2 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxA
GetFileTitleA
RegisterServiceCtrlHandlerA
CoCreateInstance
SafeArrayGetUBound
InternetConnectA
PathFileExistsA
WTSQueryUserToken
CreateEnvironmentBlock
calloc
SHGetSpecialFolderPathA
BR_Send
BR_SetSvrAckHandler
BR_SetSvrIP
BR_UserInit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ