vidc20_command
vidc21_create
vidc20_delete
vidc20_start
vidc20_stop
Behavioral task
behavioral1
Sample
cd4d7095874b987b7daf804e66a80d47.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
cd4d7095874b987b7daf804e66a80d47.dll
Resource
win10v2004-20240226-en
Target
cd4d7095874b987b7daf804e66a80d47
Size
130KB
MD5
cd4d7095874b987b7daf804e66a80d47
SHA1
815ec3ea5ebc5d7911a4163ee6d6e9a4162e782c
SHA256
63947793441e8c5ace7cc186208bff2e3f374f9db6a86e4e860833bb2a732b45
SHA512
6d56d9a931db69e0cdd2e5bad862d16418bc533a668c0b7b5f22331e7c420c86e2ec3e2613ccb0bbcad067a7d91db93a9997ca90b4d2cf472e0a9fd115472134
SSDEEP
3072:f6Y3NENgIlCVpxCcGSRq4lZJgREnZs/vJnQA8fHjdfdo:iuEN5CVNGqNngeChCBfdo
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
cd4d7095874b987b7daf804e66a80d47 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
vidc20_command
vidc21_create
vidc20_delete
vidc20_start
vidc20_stop
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ