ServiceMain
__dbk_fcall_wrapper
dbkFCallWrapperAddr
Static task
static1
Behavioral task
behavioral1
Sample
6442c46777a5325635feb35314a63f578db13acb07537f1656d73c8238048487.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
6442c46777a5325635feb35314a63f578db13acb07537f1656d73c8238048487.dll
Resource
win10v2004-20240412-en
Target
6442c46777a5325635feb35314a63f578db13acb07537f1656d73c8238048487
Size
385KB
MD5
4fe8992ac137578e87bb343398b0695c
SHA1
5ae1df214d8bf1680eccdd57bbc419eed2fe71e4
SHA256
6442c46777a5325635feb35314a63f578db13acb07537f1656d73c8238048487
SHA512
5199388204f9b16878bd50073f679b75a9e9fa5a18a9569e5b2890808704e00e1b18d710ff09c56c54284972a17a20fb834e8193554204701d5eae774060a6c1
SSDEEP
6144:6w0AUqyniY5/DCNX57jn6ITeaicoN+Ww/IL7Ih:5ynDeNtn6ITevl9/I
resource | yara_rule |
---|---|
sample | INDICATOR_EXE_Packed_VMProtect |
Checks for missing Authenticode signature.
resource |
---|
6442c46777a5325635feb35314a63f578db13acb07537f1656d73c8238048487 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
SysAllocStringLen
GetVersionExW
GetVersion
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
ExitProcess
InitializeSecurityDescriptor
ServiceMain
__dbk_fcall_wrapper
dbkFCallWrapperAddr
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ