uu
��ȡ������call
Static task
static1
Behavioral task
behavioral1
Sample
98bf1a53b2f821290ea777bdd880e6a6198474e392a81282f7dc473d0d9abbcd.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
98bf1a53b2f821290ea777bdd880e6a6198474e392a81282f7dc473d0d9abbcd.dll
Resource
win10v2004-20230703-en
Target
98bf1a53b2f821290ea777bdd880e6a6198474e392a81282f7dc473d0d9abbcd
Size
5.0MB
MD5
459d3eb0c7f42cf11df2209dc95b8c21
SHA1
f5eb323d38acae38b1ae2009b02f5b8d0e74699b
SHA256
98bf1a53b2f821290ea777bdd880e6a6198474e392a81282f7dc473d0d9abbcd
SHA512
399717f65eae90c7797b8d17a820a610c28df359e4131fd22afdae3f0cbfd1aad25ee26e764419ca591f86033707b7955b2698bb79c05dd363ebd56fce2c6a87
SSDEEP
98304:Qg4NMY+NDfCTPAYAH7BBxHcGfFzav1ZcCztzPJv9YO8DRI9OjXzL:Qg4+devs7z9Ez519MKODH
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
98bf1a53b2f821290ea777bdd880e6a6198474e392a81282f7dc473d0d9abbcd |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
uu
��ȡ������call
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE