Ordinal1
Ordinal2
Ordinal3
Behavioral task
behavioral1
Sample
80c64f1f0b11dc545c2afd3474aed272f148e3471be9051a4655d2272b658f02.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
80c64f1f0b11dc545c2afd3474aed272f148e3471be9051a4655d2272b658f02.dll
Resource
win10v2004-20240412-en
Target
80c64f1f0b11dc545c2afd3474aed272f148e3471be9051a4655d2272b658f02
Size
368KB
MD5
1f558d287d0e644d0264d705b82873c8
SHA1
d7577377db8890ec15b2365e6ce3cefbe7166448
SHA256
80c64f1f0b11dc545c2afd3474aed272f148e3471be9051a4655d2272b658f02
SHA512
5b41d13c139dae90ce10abc8ba1dbab4284063b517fea81ce611f514b7ad3ff3b77080d21db68a6d2721a5bd67434160d94bf714a3cc630360c97689b6d9a737
SSDEEP
6144:YLxdb52k4DP4W69VZFlLl0/qfZay4Pd1wmWfQDcLAb1RknF4lioSt31fc+R:u3R4Dj69VZFlLu/ocyCwmlAAsF4IB
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
80c64f1f0b11dc545c2afd3474aed272f148e3471be9051a4655d2272b658f02 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateFileA
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
MessageBoxA
GetFileTitleA
SetServiceStatus
CLSIDFromProgID
SysAllocString
InternetReadFile
PathFileExistsA
WTSQueryUserToken
CreateEnvironmentBlock
atoi
SHGetSpecialFolderPathA
Ordinal1
Ordinal2
Ordinal3
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ