MiFeng
ijlErrorStr
ijlFree
ijlGetLibVersion
ijlInit
ijlRead
ijlWrite
Behavioral task
behavioral1
Sample
90c6c80a3a494874bbd607d84b5e52ccee627ca6f06461decb91628980379d8e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
90c6c80a3a494874bbd607d84b5e52ccee627ca6f06461decb91628980379d8e.dll
Resource
win10v2004-20240508-en
Target
90c6c80a3a494874bbd607d84b5e52ccee627ca6f06461decb91628980379d8e
Size
4.4MB
MD5
67f73a72555f2c288d8f171f262c7c9a
SHA1
034b979bb1dadd55f9b08df1f37475af1ddcd6b4
SHA256
90c6c80a3a494874bbd607d84b5e52ccee627ca6f06461decb91628980379d8e
SHA512
88636f2c5b2398a5e2ee536cdce9e51e9c680528807f235db795aa257ffb3568b9c4a450cb7f8a58d33bb3db33691b57709d0f6b09e072f9ec57371f61a827b6
SSDEEP
98304:W2ii4zyJVjO3/qGeMq8ySDo03ml7R0vRZVbUcQgjZxiASxEqs:W2ii4K6StMNpoBh67VbUzcfXM1s
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
90c6c80a3a494874bbd607d84b5e52ccee627ca6f06461decb91628980379d8e |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryW
OutputDebugStringA
ExitProcess
CreateEventW
CloseHandle
ResetEvent
CreateThread
SetEvent
Sleep
CancelIo
GetLocalTime
GetLastError
CreateMutexW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GlobalLock
GlobalUnlock
OpenMutexA
CreateMutexA
VirtualAlloc
VirtualFree
ReleaseMutex
FindResourceW
SizeofResource
LoadResource
LockResource
WideCharToMultiByte
GetTickCount
ReadProcessMemory
SetLastError
GetModuleHandleA
GlobalMemoryStatusEx
lstrcpyW
QueueUserWorkItem
QueueUserAPC
CreateFileA
OpenProcess
WaitForSingleObject
LocalAlloc
LocalFree
InterlockedExchange
GetStartupInfoW
GetSystemDirectoryW
GetCommandLineW
AddVectoredExceptionHandler
GetModuleHandleW
CreateFileW
GetFileSize
ReadFile
FlushInstructionCache
GetProcAddress
VirtualAllocEx
GetSystemInfo
GetModuleFileNameW
GetModuleFileNameA
lstrlenW
QueryDosDeviceW
GetCurrentProcessId
GetCurrentThreadId
GetCurrentProcess
SetEndOfFile
HeapSize
WriteConsoleW
SetStdHandle
GetProcessHeap
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
HeapReAlloc
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
GetFileAttributesExW
GetFileType
GetStdHandle
GetACP
WaitForSingleObjectEx
SwitchToThread
GetCurrentThread
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
MultiByteToWideChar
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeSListHead
TerminateProcess
GetThreadTimes
FreeLibrary
LoadLibraryExW
InterlockedFlushSList
RtlUnwind
RaiseException
GetModuleHandleExW
HeapAlloc
HeapFree
VirtualQuery
LocalAlloc
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
MessageBoxW
CloseClipboard
GetClipboardData
OpenClipboard
GetAsyncKeyState
SetTimer
GetProcessWindowStation
GetUserObjectInformationW
NtQuerySystemInformation
NtResumeThread
NtQueryInformationProcess
NtReadVirtualMemory
NtProtectVirtualMemory
PathFindFileNameW
WSAStartup
htons
setsockopt
WSACleanup
socket
getsockname
inet_addr
connect
getaddrinfo
freeaddrinfo
closesocket
select
recv
send
WSAIoctl
MiFeng
ijlErrorStr
ijlFree
ijlGetLibVersion
ijlInit
ijlRead
ijlWrite
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ