GenericLogImpl
��������
����_ȡ�Խ���ID
ǿ��ɾ���ļ�
Static task
static1
Behavioral task
behavioral1
Sample
5f93fa47d625bd4bd69f52216dfb67e828c785daa80e21541edf064fbca4fa7a.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5f93fa47d625bd4bd69f52216dfb67e828c785daa80e21541edf064fbca4fa7a.dll
Resource
win10v2004-20230915-en
Target
5f93fa47d625bd4bd69f52216dfb67e828c785daa80e21541edf064fbca4fa7a
Size
6.4MB
MD5
6b3d6951e7102691bb1c253c7c13d53d
SHA1
c33410a9adaa3363a8001bbf3d7704af8a7d00e3
SHA256
5f93fa47d625bd4bd69f52216dfb67e828c785daa80e21541edf064fbca4fa7a
SHA512
4a1d2dc5c82a013c446d3d00c24c2dd42a80266e6e07cb16c2de354932084f4d8b0d8e245ad1fc5bcda7e3d36b38f02f1f6f7e01ba3015ffdc2bb42b02be8e9d
SSDEEP
196608:jKCDqxfhf5eyIdcFc6ef+eQ2aYTwkoEMoNtJdhHOlp79:+xfr9IBp4YrjNtO
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
5f93fa47d625bd4bd69f52216dfb67e828c785daa80e21541edf064fbca4fa7a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GenericLogImpl
��������
����_ȡ�Խ���ID
ǿ��ɾ���ļ�
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE