CSP_GetCmd
CSP_GetNameTax
CSP_GetRandom
CSP_GetToken
CSP_MonitorDev
CSP_SendToken
Behavioral task
behavioral1
Sample
8fc566e91bfa3b4fbcca47baaced89e0f55305cf34f7f123ef31fdb63dc7880d.dll
Resource
win7-20240903-en
Target
8fc566e91bfa3b4fbcca47baaced89e0f55305cf34f7f123ef31fdb63dc7880d
Size
1.1MB
MD5
86d99854876aeb33246e8ef72f0ec46a
SHA1
3855b4f609c85bbe3906271b61cb8d0e741a7ea6
SHA256
8fc566e91bfa3b4fbcca47baaced89e0f55305cf34f7f123ef31fdb63dc7880d
SHA512
34400e4d8c50c2a246871fe95a7296809d91fddb437b61880c6841373e01b6b7bc508dcf0d86280b262ab61c87372d49e38198ad9dac1bad00e27b2d7078dcc1
SSDEEP
24576:xmB1w/iSb+RFY4zclDhrIPMMlxB2bUVnN3vV9kBx8y4EQFVoNWAvVPwH5ak:xmTw/7b+TxzclDhrcFlthV96x8CCoNWB
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
8fc566e91bfa3b4fbcca47baaced89e0f55305cf34f7f123ef31fdb63dc7880d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CertOpenSystemStoreA
GetVersionExA
LockResource
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
GetForegroundWindow
SetMapMode
GetFileTitleA
DocumentPropertiesA
CopySid
PathStripToRootA
CoCreateGuid
VariantInit
InternetGetLastResponseInfoA
CSP_GetCmd
CSP_GetNameTax
CSP_GetRandom
CSP_GetToken
CSP_MonitorDev
CSP_SendToken
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ