DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
NSGetModule
RD_XXXX
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Variant.Tedy.515774.20041.14960.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Variant.Tedy.515774.20041.14960.dll
Resource
win10v2004-20231215-en
Target
SecuriteInfo.com.Variant.Tedy.515774.20041.14960.dll
Size
2.1MB
MD5
8f3b929fc04b25052cc2c3b5d0e349a8
SHA1
6cae666a487102d3137c9e6c3e3013e7176d6def
SHA256
e54e8f9b11b9a5d6994b1ad49d17306d4963a60f0ba5aae30446680728043228
SHA512
b65cb8634a8aac786335d77eb420067523334e97dec090bb694b195782654a1ef1c959479a6062fd969978dfdbde7f3d1527959145b1c4618b01df1a9215b188
SSDEEP
24576:f+kfjotUr4KQbFPKdXDTI0BK1uJJLPIZTd9Z77Xcp5Hjmypt:f+kfjo6rJcgI0k1uJBPizHcp5yk
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
SecuriteInfo.com.Variant.Tedy.515774.20041.14960.dll |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFileSize
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
wsprintfW
MessageBoxA
DeleteObject
CryptGetProvParam
SHGetSpecialFolderPathW
CoTaskMemAlloc
VariantInit
ord61
PathRemoveExtensionW
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
ord7
_amsg_exit
sqlite3_column_text
UuidFromStringA
VerQueryValueW
InternetReadFile
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
NSGetModule
RD_XXXX
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ