scanCook
scanbegin
Behavioral task
behavioral1
Sample
786efa536c2f6595e768e647abed0d1a.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
786efa536c2f6595e768e647abed0d1a.dll
Resource
win10v2004-20231215-en
Target
786efa536c2f6595e768e647abed0d1a
Size
468KB
MD5
786efa536c2f6595e768e647abed0d1a
SHA1
760162d89d771755c87e3c07ed46fd57ccb491c0
SHA256
73986cac449420b276802020d4ed14f99f9e30c9a744503c8ee6f9e0e62b2cf5
SHA512
02d34af135923f8c8e53389affc6c28067de0dfb90e32ae43c6d82153e8c570bce1bf380bba2169d1d0d8e2b80b1af4229c1175cf9f033b728ae7b35107da1d2
SSDEEP
12288:/cFvErJZL4L8xVzmkvKSteZyLl0qKUzhWDRcE31QfBjKA:EmHxmEbvKUzUDz1QfBjd
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
786efa536c2f6595e768e647abed0d1a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateProcessW
GetModuleHandleA
GetProcAddress
VirtualProtect
?uncaught_exception@std@@YA_NXZ
?what@exception@std@@UBEPBDXZ
WSAAsyncSelect
CoCreateInstance
SetTimer
OpenProcessToken
GetModuleFileNameExA
scanCook
scanbegin
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ