del
gdel
gdll
gmod
pmod
sdll
wdll
Behavioral task
behavioral1
Sample
66cbbeae5d9afbae6cffca41b5bfcc0f3e5fa2bd9746692796710e3425d78b5f.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
66cbbeae5d9afbae6cffca41b5bfcc0f3e5fa2bd9746692796710e3425d78b5f.dll
Resource
win10v2004-20240226-en
Target
66cbbeae5d9afbae6cffca41b5bfcc0f3e5fa2bd9746692796710e3425d78b5f
Size
148KB
MD5
da8dfcdd945c9dba6018a4a5c72bc06c
SHA1
fbce06e8277c1986ef3d523638b3c4c05e34143f
SHA256
66cbbeae5d9afbae6cffca41b5bfcc0f3e5fa2bd9746692796710e3425d78b5f
SHA512
9f09a6109f7ee7fef22f05d62934171268420d79448fb2945e8d34cbf927521299216b12a87613a513158a54cc2f52eb84a3cda708bf5fb303125c9f2aa9f334
SSDEEP
3072:f3icefNthmdVglJIOVwAdW/zI9lAvBNDs+PMsBQLAaY9:Pi54dVglJW89lytPzBQLU
Processes:
| resource | yara_rule |
|---|---|
| sample | family_lockbit |
Checks for missing Authenticode signature.
Processes:
| resource |
|---|
| 66cbbeae5d9afbae6cffca41b5bfcc0f3e5fa2bd9746692796710e3425d78b5f |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetDeviceCaps
SetTextColor
SetPixel
SetDCBrushColor
GetTextMetricsW
GetTextCharset
CreateDIBitmap
CreateMenu
DialogBoxParamW
GetDlgItemTextW
IsDlgButtonChecked
GetTickCount
GetProcAddress
GetModuleHandleA
GetLastError
GetCommandLineW
GetCommandLineA
FreeLibrary
del
gdel
gdll
gmod
pmod
sdll
wdll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE