MIDLib_GetGameRoomCode
MIDLib_GetMachineId
Behavioral task
behavioral1
Sample
85db375d629aad69a5d49d9a454bf480eb34980836e69f9115bf5ca906ccc3d9.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
85db375d629aad69a5d49d9a454bf480eb34980836e69f9115bf5ca906ccc3d9.dll
Resource
win10v2004-20231215-en
Target
85db375d629aad69a5d49d9a454bf480eb34980836e69f9115bf5ca906ccc3d9
Size
7.9MB
MD5
c5ee449c61d33d49eccdda4bd40cf1f5
SHA1
780e26c1199d7659e3ed0d65ee8377f7c2d49d10
SHA256
85db375d629aad69a5d49d9a454bf480eb34980836e69f9115bf5ca906ccc3d9
SHA512
cd404d3e8358d06c99659861c754a06795edd8da348ccdcf236a01ed4b81fc62117741d907c2f6521414b1840a564a30d46772b1833336717c043975ec9c5ec2
SSDEEP
196608:Wt9MCdmn9glCNu6KURPdjRdt1I116SmVne4Ef:0HduilN6Kgv1I11xmVnVy
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
85db375d629aad69a5d49d9a454bf480eb34980836e69f9115bf5ca906ccc3d9 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
LoadLibraryA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
EnumWindows
GetUserObjectInformationW
GetProcessWindowStation
GetUserObjectInformationW
CreateSolidBrush
RegCloseKey
ShellExecuteA
inet_ntoa
InternetOpenA
Direct3DCreate9
D3DXCreateTexture
DwmExtendFrameIntoClientArea
ImmReleaseContext
WTSSendMessageW
MIDLib_GetGameRoomCode
MIDLib_GetMachineId
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ