DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
XLUserS_CreateXunleiUserInstance
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Tedy.520099.20708.4991.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Tedy.520099.20708.4991.dll
Resource
win10v2004-20231222-en
Target
SecuriteInfo.com.Variant.Tedy.520099.20708.4991.dll
Size
1.5MB
MD5
d8dc3be4997836dc7aa05278e858e66d
SHA1
6893524c46ba363f758bbe76cb923fae42d6e308
SHA256
aeac56403dfcf3969d3596179cdfebfc897b1b5cbe5b299e1d18935327222527
SHA512
33f25fb84fde935666394b3e875661c11f9ea33877a05bff3f8b8bd232a892b2fa77f46d0056e374f853ee88b15b3f59b062c03edee8835e18b429a5be8be5a1
SSDEEP
24576:haRqC9mVoiaPIYlH1NJq6guknT/Tc8c8spvuJ0I:haRnmWiaPb3fknTQ8XhJ0
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
SecuriteInfo.com.Variant.Tedy.520099.20708.4991.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WSASendTo
GetAdaptersInfo
lua_pushnil
EnterCriticalSection
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
UnregisterClassA
MessageBoxA
SHGetSpecialFolderPathA
CoCreateInstance
SysFreeString
ord10
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
fread
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
XLUserS_CreateXunleiUserInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ