GetInstallDetailsPayload
SignalChromeElf
SignalInitializeCrashReporting
StartAntiLsp
Behavioral task
behavioral1
Sample
4e2311b5e5ba863e0651c2d26c70f0b8af51def32dc8017840b6fe8ca825202d.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4e2311b5e5ba863e0651c2d26c70f0b8af51def32dc8017840b6fe8ca825202d.dll
Resource
win10v2004-20240704-en
Target
4e2311b5e5ba863e0651c2d26c70f0b8af51def32dc8017840b6fe8ca825202d
Size
1004KB
MD5
7c1aa1c008d9a3bfa039cb7c1996e69c
SHA1
0757263151a9bb0a445f5aa9eac700c459830cf0
SHA256
4e2311b5e5ba863e0651c2d26c70f0b8af51def32dc8017840b6fe8ca825202d
SHA512
76b0f52989821692b214dfc73ea954502348c7ea3c27e29534874a97767871e2cec94f3ae49b8476091770a98e51c1cd085a10a1173bb9e99a74c43a3278c0c5
SSDEEP
24576:9DaOTFsdNSSkAQjHrzuhEQkf5/mjhgkdQMD8QDMlK:xsdkljPbvf8jG89D
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
4e2311b5e5ba863e0651c2d26c70f0b8af51def32dc8017840b6fe8ca825202d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
GetWindowThreadProcessId
MessageBoxA
MoveToEx
ChooseColorA
OpenPrinterA
RegQueryValueExA
SHGetFileInfoA
_TrackMouseEvent
GetInstallDetailsPayload
SignalChromeElf
SignalInitializeCrashReporting
StartAntiLsp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ