BR_Send
BR_TerminateCrashProcess
BR_UserInit
intit
Behavioral task
behavioral1
Sample
837c2395ff70ade054a63033edfbd428f0d1e0520badc4a393143d06589b8a2e.dll
Resource
win7-20240704-en
Target
837c2395ff70ade054a63033edfbd428f0d1e0520badc4a393143d06589b8a2e
Size
190KB
MD5
b3b1a8a3f837b016eea6e33ed48ac04f
SHA1
5130579cd4df366c3e853ea46dfec484cf450b9a
SHA256
837c2395ff70ade054a63033edfbd428f0d1e0520badc4a393143d06589b8a2e
SHA512
d6b41da5f9a6fbcbe441e482adb8c2e6bfab7e3ccf8496d859404f9d149e96c81f0dc803907bc78dbc692e8baecc0de57b88e6a7423e43a1617b78d0afa09555
SSDEEP
3072:ErLnVESv0jirOPIK4MA5l9503WdnaYpI5XQPKoDWNk7lvjNq/gRH33vw0:MiEfgAD95TdFpXAe7lhKgh33vw
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
837c2395ff70ade054a63033edfbd428f0d1e0520badc4a393143d06589b8a2e |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WriteConsoleW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
OpenProcessToken
DestroyEnvironmentBlock
recv
BR_Send
BR_TerminateCrashProcess
BR_UserInit
intit
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ