ComInit1
ComInit2
ComInit3
ComInit4
ComInit5
ComInit6
ComInit7
Behavioral task
behavioral1
Sample
c836dc696be067012bd9976598e24d51.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c836dc696be067012bd9976598e24d51.dll
Resource
win10v2004-20240226-en
Target
c836dc696be067012bd9976598e24d51
Size
736KB
MD5
c836dc696be067012bd9976598e24d51
SHA1
6509a7624441dd341db2023c0a77403dcfd3da71
SHA256
e19cd1fdf5ccfaf6136ff16f723fcd32e25ceb2e2bb26610ab30cece73b9ffa9
SHA512
31a9916ef67f69c4434f52f8a036755f7cd7500f245d1b1bf4c206afb81ee7445ce398ef466298834eeb9976851071def278870feabb6efd969c617f5054eef4
SSDEEP
12288:46ixGNuzcpwEDzuHIVf9qMdrbm68a7smw1RgY9b+pvXteaZ86:46ixvMDyyMMdrbN7smw1Rv9bcU6
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
c836dc696be067012bd9976598e24d51 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
send
GetACP
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
GetClassNameA
ComInit1
ComInit2
ComInit3
ComInit4
ComInit5
ComInit6
ComInit7
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ