FILEANA_AnalyzeFile
FILEANA_AnalyzeFileEX
FILEANA_CreateHandle
FILEANA_DestroyHandle
FILEANA_GetFileIndex
FILEANA_GetPacket
FILEANA_GetPercent
FILEANA_SetKeyFramePos
Behavioral task
behavioral1
Sample
FileAnalyzer.dll
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
FileAnalyzer.dll
Resource
win10v2004-20230703-en
Target
FileAnalyzer.dll.zip
Size
20KB
MD5
3c1f338ecf82e4704a15cee75532c076
SHA1
eaca3412608a4c24cc76a1420a6fdaa2be480b98
SHA256
20209f373753204af1a43173f3fe67d2c12cb524efba15a7337b6793bf00987a
SHA512
c2a86bc8afc3447d77ced14d91aa6a4e1a405b139ad98995b68405c4c8a615e96e3bc550b26674d313742e38e416197a58dac265464ae601d0c84b5167213499
SSDEEP
384:bukSamvhm93I75+zP3P8r89ht1mPn6oNhY45iUcLP/F0o7GQXQdhAb/3+:FSa2hm675kP3kr89fMCezYUcLXjN4AbW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/FileAnalyzer.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/FileAnalyzer.dll | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/FileAnalyzer.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
FILEANA_AnalyzeFile
FILEANA_AnalyzeFileEX
FILEANA_CreateHandle
FILEANA_DestroyHandle
FILEANA_GetFileIndex
FILEANA_GetPacket
FILEANA_GetPercent
FILEANA_SetKeyFramePos
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE