_PBX_CreateNonVisualObject@16
_PBX_GetDescription@0
Behavioral task
behavioral1
Sample
1ba66f4736d0866ffc70e217c4080067ee36d4663f3d1bcb82421b4b98d39b18N.dll
Resource
win7-20240903-en
Target
1ba66f4736d0866ffc70e217c4080067ee36d4663f3d1bcb82421b4b98d39b18N.exe
Size
2.6MB
MD5
85699f224b69d34beb334e4d99d766d0
SHA1
e2f33b7967c4849cd9671367b33437a23dd971b6
SHA256
1ba66f4736d0866ffc70e217c4080067ee36d4663f3d1bcb82421b4b98d39b18
SHA512
899011cc168efa4b506888c4dfb9bc4cc10b736a58cc5782c92d5ce7ba963e9f61361ed8821205d333d20de7dc80d46dbf8b0179bea0956b626f9384eab4d1d6
SSDEEP
49152:15H5NODCwCU2vWBSxnlcheUUd+QOnsyFNykwUQlX6NLd:VN4CwUv1xnlBUUdhO9FgjUnH
resource | yara_rule |
---|---|
sample | vmprotect |
Checks for missing Authenticode signature.
resource |
---|
1ba66f4736d0866ffc70e217c4080067ee36d4663f3d1bcb82421b4b98d39b18N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_PBX_CreateNonVisualObject@16
_PBX_GetDescription@0
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE