DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Behavioral task
behavioral1
Sample
836e9d8202b0dac5078fae211d9b8f59fd01e01d36075ddb33598b02e4bc0536.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
836e9d8202b0dac5078fae211d9b8f59fd01e01d36075ddb33598b02e4bc0536.dll
Resource
win10v2004-20240226-en
Target
836e9d8202b0dac5078fae211d9b8f59fd01e01d36075ddb33598b02e4bc0536.dll
Size
2.1MB
MD5
cfc0b02e72c5c8e8f2c10accfb720eab
SHA1
1cfa768242d4d502e7cc81a39be649b60149ac4c
SHA256
836e9d8202b0dac5078fae211d9b8f59fd01e01d36075ddb33598b02e4bc0536
SHA512
43050118333599b96550b4cbcb0851baf352f6bb7abb4f5a09d9145e6a33c0f75dac8c33bc51c2aa89b25a54ecda1854b2cd74be86e63c4037baccfc105738f2
SSDEEP
24576:4HBaG8usSwizF92oQt85an9SLHAnYhJGxKzEr2S92p31W09f:E8ushwibt85aGH5G8S81W
resource | yara_rule |
---|---|
sample | INDICATOR_EXE_Packed_VMProtect |
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
836e9d8202b0dac5078fae211d9b8f59fd01e01d36075ddb33598b02e4bc0536.dll |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?GetFileNameFormPath@qqmusic@@YA?AV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@V23@@Z
ntohl
InternetCanonicalizeUrlW
GetFileVersionInfoSizeW
InterlockedIncrement
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetWindowLongW
MessageBoxA
RegCloseKey
StgOpenStorage
SysAllocString
ord32
PathFileExistsW
??$?9DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
GetIpForwardTable
_invalid_parameter_noinfo
Netbios
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ