DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
NSGetModule
RD_XXXX
Behavioral task
behavioral1
Sample
bc87a009129847de32dd12d0cd239bfcadc83d80bbedef71410cd0c3e282e304.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc87a009129847de32dd12d0cd239bfcadc83d80bbedef71410cd0c3e282e304.dll
Resource
win10v2004-20240226-en
Target
bc87a009129847de32dd12d0cd239bfcadc83d80bbedef71410cd0c3e282e304.dll
Size
2.1MB
MD5
555df9e84eab391cc3d8518be7633227
SHA1
bef23bcf974bb17a113465672a74e3c266e2f58e
SHA256
bc87a009129847de32dd12d0cd239bfcadc83d80bbedef71410cd0c3e282e304
SHA512
189066d587dd99f40df9cea4b48cb5a62047c723f54cc95c4c6aa49f1024505c427b28ece1f6c833969b3736507a6e024d93ce2f721a95cdd5291c72ab8ea28d
SSDEEP
24576:u+BS8Ri0rgNm4zMA+JGiSkwkq0Yl/O8pxHjOnSCX7PcBPv6:u+Ti0h4zMfERtm8pZMSO7U
resource | yara_rule |
---|---|
sample | INDICATOR_EXE_Packed_VMProtect |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
bc87a009129847de32dd12d0cd239bfcadc83d80bbedef71410cd0c3e282e304.dll |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetFullPathNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
TranslateMessage
MessageBoxA
DeleteObject
CryptExportKey
ord165
CoCreateInstance
LoadRegTypeLi
ord43
PathRemoveBackslashW
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
ord7
ceil
sqlite3_exec
UuidFromStringA
GetFileVersionInfoW
HttpOpenRequestA
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
NSGetModule
RD_XXXX
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ