del
gdel
gdll
gmod
pmod
sdll
wdll
Behavioral task
behavioral1
Sample
e2a0224a81cf7c568679c751a6e540db172c2310d52ca314000ba97b7dfe3870.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
e2a0224a81cf7c568679c751a6e540db172c2310d52ca314000ba97b7dfe3870.dll
Resource
win10v2004-20240226-en
Target
e2a0224a81cf7c568679c751a6e540db172c2310d52ca314000ba97b7dfe3870
Size
145KB
MD5
fb46847a33786db349831ceb51fb21b5
SHA1
d9b48df493ef818ccf5702cea307e51466b758f0
SHA256
e2a0224a81cf7c568679c751a6e540db172c2310d52ca314000ba97b7dfe3870
SHA512
ea4c68acbce42f56c6453792c60d6b67def143f8a51110f80e0a68d7d424fdce2147023248e46fceaae8107f4a1aed64a711a04e3e10c9347aeaa305de025602
SSDEEP
3072:sJ86CimiAMXacFU7z8pLB62KqQ57fhSCWFyFpJE4g+DzWfNz6tmZff6bevFIw2:UVCtyTOUapR3qSaF+tmZlvt2
resource | yara_rule |
---|---|
sample | family_lockbit |
Checks for missing Authenticode signature.
resource |
---|
e2a0224a81cf7c568679c751a6e540db172c2310d52ca314000ba97b7dfe3870 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetPixel
SetDCBrushColor
GetTextColor
GetPixel
CreateFontW
GetDlgItemTextW
GetWindowTextW
IsDlgButtonChecked
LoadImageW
LoadMenuW
EndDialog
DialogBoxParamW
DefWindowProcW
GetClassNameW
GetCommandLineW
SetLastError
LoadLibraryExA
GetTickCount
GetProcAddress
GetModuleHandleW
FreeLibrary
FormatMessageW
GetFileAttributesW
del
gdel
gdll
gmod
pmod
sdll
wdll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE