SfAddFileFilterRule
SfAddForbidAddrRule
SfAddForbidAddrRuleByHost
SfAddPtProcessList
SfBandFile
SfClearAddrFilterRules
SfClearFileFilterRules
SfClearPtProcessList
SfExtendFunc
SfSetBarServerInfo
SfUnBandFile
WHExtendFunc
WHSetBarServerInfo
Behavioral task
behavioral1
Sample
03dca939f77c83bc3fca6e65a105dac73e206d9767537ee02a9a399880f42367.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
03dca939f77c83bc3fca6e65a105dac73e206d9767537ee02a9a399880f42367.dll
Resource
win10v2004-20240226-en
Target
03dca939f77c83bc3fca6e65a105dac73e206d9767537ee02a9a399880f42367
Size
322KB
MD5
97e5e3d490808997935cc4cf62820c96
SHA1
9898d103d6190e55cc74a5573ddf4bc4dc41200b
SHA256
03dca939f77c83bc3fca6e65a105dac73e206d9767537ee02a9a399880f42367
SHA512
29a595d077450a7e83f0c6dd479a756a7c0e48b0972017c06072ce6f13ae615b386c95cb66c0fd550fd19fb9260afb73efa988939d80987c365551b704a78e37
SSDEEP
6144:4KtS1jSHxj+9/PO6V4Kf+u65wkmu8cPezcY0PR1y9/B6U4GkLD4yYQh:dS1jSHtD6V4Kfswkmu/PMcO9Z6OMD4M
resource | yara_rule |
---|---|
sample | INDICATOR_EXE_Packed_VMProtect |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
03dca939f77c83bc3fca6e65a105dac73e206d9767537ee02a9a399880f42367 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCPInfo
GetOEMCP
RtlUnwind
ExitProcess
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
HeapReAlloc
TerminateProcess
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
HeapCreate
VirtualFree
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetCurrentProcess
FlushFileBuffers
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GlobalFlags
WritePrivateProfileStringA
InterlockedIncrement
RaiseException
SetErrorMode
lstrcatA
InterlockedDecrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
SetLastError
GlobalFree
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
lstrcmpiA
GetVersion
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetWindowsDirectoryA
GetModuleFileNameA
lstrlenA
DeleteFileA
FindFirstFileA
FindClose
WriteFile
ReadFile
SetFilePointer
GetFileSize
OutputDebugStringA
LocalAlloc
LocalFree
GetLastError
CreateFileA
DeviceIoControl
HeapDestroy
CloseHandle
VirtualProtect
GetModuleFileNameA
ExitProcess
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
LoadIconA
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
SetWindowPos
ShowWindow
SetWindowLongA
GetDlgItem
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
SetWindowTextA
GetClassNameA
wsprintfA
GetWindowTextA
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnregisterClassA
UnhookWindowsHookEx
SetMenuItemBitmaps
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
DestroyMenu
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetCursor
PostMessageA
PostQuitMessage
SendMessageA
MessageBoxA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
MessageBoxA
ExtTextOutA
GetStockObject
TextOutA
RectVisible
PtVisible
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
GetDeviceCaps
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
CreateBitmap
Escape
ClosePrinter
OpenPrinterA
DocumentPropertiesA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegQueryValueExA
RegOpenKeyA
RegDeleteKeyA
OpenSCManagerA
CreateServiceA
OpenServiceA
CloseServiceHandle
StartServiceA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
ord17
PathFindExtensionA
PathFindFileNameA
VariantInit
VariantChangeType
VariantClear
inet_addr
htons
ioctlsocket
connect
select
send
closesocket
WSAStartup
WSALookupServiceBeginA
WSALookupServiceNextA
WSAGetLastError
WSALookupServiceEnd
WSACleanup
socket
inet_ntoa
recv
SfAddFileFilterRule
SfAddForbidAddrRule
SfAddForbidAddrRuleByHost
SfAddPtProcessList
SfBandFile
SfClearAddrFilterRules
SfClearFileFilterRules
SfClearPtProcessList
SfExtendFunc
SfSetBarServerInfo
SfUnBandFile
WHExtendFunc
WHSetBarServerInfo
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ