JYqhOqwidzIKiNbU
Run
Behavioral task
behavioral1
Sample
2dab3f8a2264ca5f2a2376d732fc6c825cf93e43abd2eb6759620208e8b23fef.dll
Resource
win10-20240404-en
Behavioral task
behavioral2
Sample
2dab3f8a2264ca5f2a2376d732fc6c825cf93e43abd2eb6759620208e8b23fef.dll
Resource
win7-20240708-en
Behavioral task
behavioral3
Sample
2dab3f8a2264ca5f2a2376d732fc6c825cf93e43abd2eb6759620208e8b23fef.dll
Resource
win10v2004-20240802-en
Target
2dab3f8a2264ca5f2a2376d732fc6c825cf93e43abd2eb6759620208e8b23fef
Size
3.9MB
MD5
093608a2d6eb098eb7ea917cc22e9998
SHA1
e5ea68cf7eeee0511b80e18b493b7479ad829232
SHA256
2dab3f8a2264ca5f2a2376d732fc6c825cf93e43abd2eb6759620208e8b23fef
SHA512
c5275fa8aceaec55c1625823ba7bdf14dc6f0185bdf56d4a4f4c468d7242af18c9a2e32c855f3059acd0dd258e83202ea1111253799a1bb89be5f1b4144fa2ab
SSDEEP
98304:trU58aUMi6UDEdR25yTLNY2lXML3OQTLRmM8bsEjoDFl0Jj:t45YAd0iNY2563vTLRl8Xs3gj
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
2dab3f8a2264ca5f2a2376d732fc6c825cf93e43abd2eb6759620208e8b23fef |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WaitForSingleObject
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
wsprintfW
JYqhOqwidzIKiNbU
Run
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ