DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
XLUserS_CreateXunleiUserInstance
Behavioral task
behavioral1
Sample
7ad0970378b075286b992d85d547601c3bb676e149f18cf58ad9a957b677dfd9.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
7ad0970378b075286b992d85d547601c3bb676e149f18cf58ad9a957b677dfd9.dll
Resource
win10v2004-20240226-en
Target
7ad0970378b075286b992d85d547601c3bb676e149f18cf58ad9a957b677dfd9.dll
Size
1.5MB
MD5
74a07a048837f9704b80066a94799b49
SHA1
dd75437a67aac21f42e20a8d8b7c8d00840b7e10
SHA256
7ad0970378b075286b992d85d547601c3bb676e149f18cf58ad9a957b677dfd9
SHA512
72b717887520bc13066203206439265af6980a1ead0114a60a4dfeb9e3e81f21538cd69cc60d865d1a0903e8cc18ed32851fafeef696fa53c5d1f63b8d0313bb
SSDEEP
24576:RscghjFFuCOjfTYs06OVzVeDl9UwdnQ6:6DsHsV6yVeXd
resource | yara_rule |
---|---|
sample | INDICATOR_EXE_Packed_VMProtect |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
7ad0970378b075286b992d85d547601c3bb676e149f18cf58ad9a957b677dfd9.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
gethostname
GetAdaptersInfo
XLLRT_RegisterClass
PostQueuedCompletionStatus
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
PostMessageW
MessageBoxA
SHGetSpecialFolderPathA
CoCreateInstance
SysAllocStringLen
ord30
??_D?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?terminate@@YAXXZ
DllCanUnloadNow
DllGetClassObject
DllInstall
DllRegisterServer
DllUnregisterServer
XLUserS_CreateXunleiUserInstance
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ