addProxyMenuTitle
addProxyPassOn
Behavioral task
behavioral1
Sample
6e7b6f7281c3cb62194f4b79dcb0530e04d0fedc788f92be8c3663676c8a567f.dll
Resource
win7-20230831-en
Target
6e7b6f7281c3cb62194f4b79dcb0530e04d0fedc788f92be8c3663676c8a567f
Size
809KB
MD5
de8db610da717d1b5fb3e57c2b8a7c4b
SHA1
cca14dfb77575dfa3ab9a78d3ccd75c3b53c0584
SHA256
6e7b6f7281c3cb62194f4b79dcb0530e04d0fedc788f92be8c3663676c8a567f
SHA512
40222a97629196cfae3a9ecc6999de57d365c61f99722888f0cbff74f608ac627c1feed3bf1e16a98a34fbb0271d518aa65b9ae5cedfdf36285a90e299854d2a
SSDEEP
24576:Bvlakce4iV0Iicyzmvmf94NXmgsF8FaD:ZxMbbzmOf94N1Y
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6e7b6f7281c3cb62194f4b79dcb0530e04d0fedc788f92be8c3663676c8a567f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
addProxyMenuTitle
addProxyPassOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE