GetLauncherVersion
XiLoaderMain
Static task
static1
Behavioral task
behavioral1
Sample
challange_Benign_86d6661b47f4bc642652e0c83e8ed9f52ebfafa5b36907f01e7343abbb90ff63.dll
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
challange_Benign_86d6661b47f4bc642652e0c83e8ed9f52ebfafa5b36907f01e7343abbb90ff63.dll
Resource
win10v2004-20230703-en
Target
challange_Benign_86d6661b47f4bc642652e0c83e8ed9f52ebfafa5b36907f01e7343abbb90ff63.exe
Size
26KB
MD5
a0a34d4caf601594cf1ac581a968f454
SHA1
27f5a1fa067e5fb813805ce99327c2ac6309c776
SHA256
86d6661b47f4bc642652e0c83e8ed9f52ebfafa5b36907f01e7343abbb90ff63
SHA512
990d11436b87039c8c5bcc11e177219fe4024604685d75f45a0e1c919847a4e6f7d96afd1b2b1067c3b8551c3532e42219e20aeb3d24f093465f15295f754af3
SSDEEP
768:s+olQxWu7AcPZV6XlWtJU+1XpAH6SBr28+YN1:s+6Qj7z7zrVXpAaSB6nYb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
challange_Benign_86d6661b47f4bc642652e0c83e8ed9f52ebfafa5b36907f01e7343abbb90ff63.exe |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
GetLauncherVersion
XiLoaderMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE