AlphaBlend
DllInitialize
GradientFill
TransparentBlt
mydll
vSetDdrawflag
Behavioral task
behavioral1
Sample
5a6bd6e3e844f269ee62fd1a7dc81158dd88076bbefc213c8ed8cc20c42629f8.dll
Resource
win7-20240704-en
Target
5a6bd6e3e844f269ee62fd1a7dc81158dd88076bbefc213c8ed8cc20c42629f8
Size
368KB
MD5
1a63e3fbfc4d6f4fbe6d4d6834400603
SHA1
b0530adc8a509eec1cf5a368a63916aa5e31436d
SHA256
5a6bd6e3e844f269ee62fd1a7dc81158dd88076bbefc213c8ed8cc20c42629f8
SHA512
9c42807a3c92e0f70d24e028de1d4e17d3494ae09729b03a803fcdf1c5df04e86d025df847bda12e655964c909c263f35d15a76529453eb229398ae7445e14e2
SSDEEP
6144:762dnYsLhBjfBS9QhQvTRje+S7kUSt5WmAoyZUyV2ZzXTvRDGMYdHGC+Q6g36Vyk:RDUTRLdUStXAoyBV2ZXvoMFQ6g3hjTXU
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
5a6bd6e3e844f269ee62fd1a7dc81158dd88076bbefc213c8ed8cc20c42629f8 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionExA
GetVersion
RtlMoveMemory
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetupDiGetDeviceInterfaceDetailA
GetDlgCtrlID
RestoreDC
OpenPrinterA
RegCreateKeyExA
ord17
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
mydll
vSetDdrawflag
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ