??��??��?a��??��
??��??��?a��??��2
RunDllHostCallBack
��???���̦�??��
Behavioral task
behavioral1
Sample
7b05ae8f410def372a6884b45fd3aa87.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
7b05ae8f410def372a6884b45fd3aa87.dll
Resource
win10v2004-20231215-en
Target
7b05ae8f410def372a6884b45fd3aa87
Size
944KB
MD5
7b05ae8f410def372a6884b45fd3aa87
SHA1
195439cb6e3011002f9a5671951c2af35587742c
SHA256
8dbf92538852415e7fa2fb125143662073c6c31356b11957e5b39b4077666bbc
SHA512
c92fabbe31e4c0fa8517015731baaf27063186a571910c4d92eb6e3f55816898a2f53365d0ba06f4d6bd392467297d84a10aa740bfcb4c12e627f0fc388b3c19
SSDEEP
24576:Z0drO5rvAhZJMgr+9hZ3XwuwIwoHhyijiQy:Z0d6xvA7JMe+9hZHwIJhyP
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
7b05ae8f410def372a6884b45fd3aa87 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
UnlockFile
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetTopWindow
MessageBoxA
SetWindowExtEx
midiStreamProperty
DocumentPropertiesA
RegSetValueExA
Shell_NotifyIconA
CLSIDFromString
UnRegisterTypeLi
ImageList_Destroy
accept
ChooseColorA
??��??��?a��??��
??��??��?a��??��2
RunDllHostCallBack
��???���̦�??��
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ