GetVersionInfo
component_getDescriptionFunc
component_getFactory
component_getImplementationEnvironment
component_writeInfo
Behavioral task
behavioral1
Sample
032c984e0114e0185452fdb6537d4a84.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
032c984e0114e0185452fdb6537d4a84.dll
Resource
win10v2004-20231215-en
Target
032c984e0114e0185452fdb6537d4a84
Size
28KB
MD5
032c984e0114e0185452fdb6537d4a84
SHA1
dbd3355a00ca206dd66bb8b1caf68dcebfeeae69
SHA256
dd8e51ca4ef9970572b68c89894045a3281fc57fb03b98c64880a58236a3557e
SHA512
cdc48cb9add53107f38dea28bb58aae51d265e8fc90df1c280f0a517640d9963382e2b21c0422572c30a4cd061cdf37a30a37c59f4a0a78f27a0de2eb766e147
SSDEEP
768:2RZE8yoqDf44rEHr5g3AYBIwGKbtmHWAA:289vDfbwHrKJIhKbwHWT
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
032c984e0114e0185452fdb6537d4a84 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetVersionInfo
component_getDescriptionFunc
component_getFactory
component_getImplementationEnvironment
component_writeInfo
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE