GetInstallDetailsPayload
SignalChromeElf
SignalInitializeCrashReporting
StartAntiLsp
Behavioral task
behavioral1
Sample
31a8f9b6985db63f40c7f7cd4b60e3a30d644efdd786196d946b3baac2a9d769.dll
Resource
win7-20240729-en
Target
31a8f9b6985db63f40c7f7cd4b60e3a30d644efdd786196d946b3baac2a9d769
Size
1.3MB
MD5
7a5cdfca6de946507b1006afec8731b0
SHA1
213df8e1f36ebccc87ddb0224638e00591b89cfa
SHA256
31a8f9b6985db63f40c7f7cd4b60e3a30d644efdd786196d946b3baac2a9d769
SHA512
f4267eb7f8456df8918f2002f57ea41519651071667e37a7f54b37ff7e2a06dea8c4c04561de0625c293163d600756e64fb0a7be4a0929f5465a6d323ff2487b
SSDEEP
24576:mbxhsQrS8Wo+Oleg/aglSaHdei5TtIm3Yt4zjg8nxuks:mrLrS++E/TeiLImIt4zIks
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
31a8f9b6985db63f40c7f7cd4b60e3a30d644efdd786196d946b3baac2a9d769 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionExA
GetVersion
DeleteCriticalSection
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
InvalidateRgn
EndPage
GetOpenFileNameA
ClosePrinter
RegSetValueExA
DragQueryFileA
ImageList_Add
CoTreatAsClass
VarBstrFromDate
GetInstallDetailsPayload
SignalChromeElf
SignalInitializeCrashReporting
StartAntiLsp
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ