del
gdel
gdll
gmod
pmod
sdll
wdll
Behavioral task
behavioral1
Sample
3cca177aa24c956d8d83a7e277d362f88fe40189928451575f5ec32794ae1686.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3cca177aa24c956d8d83a7e277d362f88fe40189928451575f5ec32794ae1686.dll
Resource
win10v2004-20240704-en
Target
3cca177aa24c956d8d83a7e277d362f88fe40189928451575f5ec32794ae1686
Size
140KB
MD5
239eb6dc2c7cd1b59f28a464bd932a7f
SHA1
2888a5846119e761c0af41b9e846a17ce8df1bca
SHA256
3cca177aa24c956d8d83a7e277d362f88fe40189928451575f5ec32794ae1686
SHA512
53fa6d61349cd4095e1726f3a6148248ba3039c0af6f778c345bc5790260300f88aab3d53d04209f69b8b6d87e3f9a869df7909e4f6b69ca65ed89fe5a641599
SSDEEP
3072:hAwM0KGSdeyQgeLBPDB8b45nSXAUgpDj1rYE1HXNwFFgqef9BfZMXr2/P8:hAwhdy3eBB88wQbdSE9ezg7y
Processes:
resource | yara_rule |
---|---|
sample | family_lockbit |
Checks for missing Authenticode signature.
Processes:
resource |
---|
3cca177aa24c956d8d83a7e277d362f88fe40189928451575f5ec32794ae1686 |
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetDeviceCaps
SetTextColor
SetPixel
SetDCBrushColor
GetTextMetricsW
GetTextCharset
CreateDIBitmap
CreateMenu
DialogBoxParamW
GetDlgItemTextW
IsDlgButtonChecked
GetTickCount
GetProcAddress
GetModuleHandleA
GetLastError
GetCommandLineW
GetCommandLineA
FreeLibrary
del
gdel
gdll
gmod
pmod
sdll
wdll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE