CopyProtectorDelete
CopyProtectorMake
Behavioral task
behavioral1
Sample
SecuriteInfo.com.not-a-virus.AdWare.AdRotator.6223.5499.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
SecuriteInfo.com.not-a-virus.AdWare.AdRotator.6223.5499.dll
Resource
win10v2004-20230915-en
Target
SecuriteInfo.com.not-a-virus.AdWare.AdRotator.6223.5499.dll
Size
302KB
MD5
3bc33ba8ae07c650f43882fd2c61727f
SHA1
1ab6ce5d5db05d0eecd23964f4178acb7fda2c7d
SHA256
4dc133123c1e40644aaabeec872c829dbeab614ea5126a9cb77e22ecba34b0a4
SHA512
e2e898c845aade1459b011fb49f37553d98369dafd8474f0de0fa514ffa1eca7570eefb3230eb0db1cd11c49cac31cd9f14e40a13bf0113c3c16e8148479672e
SSDEEP
6144:B2zBHNhI966AGkAjOpoaY7TAAY27yZniIms+QTfxj6:8zB7q6xGJOpqnRypiI396
resource | yara_rule |
---|---|
sample | aspack_v212_v242 |
Checks for missing Authenticode signature.
resource |
---|
SecuriteInfo.com.not-a-virus.AdWare.AdRotator.6223.5499.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CopyProtectorDelete
CopyProtectorMake
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE