Run
Start
Behavioral task
behavioral1
Sample
399f8a0be000f5563faab1bdf55ffa32cacb1ca234268e785e0232c23dc3d7ad.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
399f8a0be000f5563faab1bdf55ffa32cacb1ca234268e785e0232c23dc3d7ad.dll
Resource
win10v2004-20240226-en
Target
399f8a0be000f5563faab1bdf55ffa32cacb1ca234268e785e0232c23dc3d7ad
Size
2.6MB
MD5
39e755c08156123e4cabac6bf8d1fd3a
SHA1
908487a2e8d68a9243de6e73914f847034e6de38
SHA256
399f8a0be000f5563faab1bdf55ffa32cacb1ca234268e785e0232c23dc3d7ad
SHA512
1e65e9f783f3b2806f1d8c8ad2bde57fa97f87bb4d7f1975e43c8f4d25d7973ba95dbeaccba1568846d2164dc36b45b155483fbc81a1c51994e631be47baaba6
SSDEEP
49152:E4J9oJTzJuWJ/xzXTZpa55Uvxu4m3nGHMcvxsjnblR:Eg9KT1uezXTza55Eu4m3qZsvf
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
399f8a0be000f5563faab1bdf55ffa32cacb1ca234268e785e0232c23dc3d7ad |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetConsoleMode
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
Run
Start
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ