3?��??��
???a?��?��
Q546528533
Behavioral task
behavioral1
Sample
f4e7fd0a724d272ac9e7bd0b6f60102bfe37e51db84a49fcbe2d6a2387d4a718.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f4e7fd0a724d272ac9e7bd0b6f60102bfe37e51db84a49fcbe2d6a2387d4a718.dll
Resource
win10v2004-20240419-en
Target
f4e7fd0a724d272ac9e7bd0b6f60102bfe37e51db84a49fcbe2d6a2387d4a718
Size
1.2MB
MD5
a41dc1d64d1aaa19a830aa50b94f1aae
SHA1
aa2c34958d402e6866c765f08ba7b5d4434662ee
SHA256
f4e7fd0a724d272ac9e7bd0b6f60102bfe37e51db84a49fcbe2d6a2387d4a718
SHA512
c6858a4558dd14e2d93dffbf8207d03ddfc934522eb1160b25e0bdaa0595aa0ef639fbb2d0419473d435c23b929de1b6e2ef0a8068e48d63e31fa223071399f5
SSDEEP
24576:2Ts6Lw2QEkMUVUzWf0UTe96tMr4kAU8KWKpAaXNHtUgDBE+KoM:2ozZMNWfPRUJd3NUgDO+KoM
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
f4e7fd0a724d272ac9e7bd0b6f60102bfe37e51db84a49fcbe2d6a2387d4a718 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
midiStreamStop
sendto
GetVersionExA
GetVersion
LeaveCriticalSection
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetCursor
CreateRoundRectRgn
DocumentPropertiesA
RegCloseKey
ShellExecuteA
OleInitialize
RegisterTypeLi
ImageList_Destroy
ChooseColorA
3?��??��
???a?��?��
Q546528533
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ