registerMe
stopAd
Behavioral task
behavioral1
Sample
0f33205f1bbb84faab40e030c34ec1fe.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0f33205f1bbb84faab40e030c34ec1fe.dll
Resource
win10v2004-20231215-en
Target
0f33205f1bbb84faab40e030c34ec1fe
Size
476KB
MD5
0f33205f1bbb84faab40e030c34ec1fe
SHA1
366f1122f4efeaf6c0c564544654ca905e6279e7
SHA256
6265fe4fd04eec333e9e79f1e67d5db46e14f849d9c50c8844a7eedf83ed2028
SHA512
23b25cd771882aa4cdf2c62118a2de7f1e2dcdc4f6d081764d89e4239ce2f2cefc6a98dfe6fbb4f883748a150fde218067da6f9afca53122ade2c7c8a9c2304d
SSDEEP
6144:hw7LBM66ibNTcgpqy8MoL7FjTIFyNnzTdoabEMc8TaklKK4lovbil1c3y41FAoqs:C7bb1ocyNdoaEMc2P4Cbilw141SV
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0f33205f1bbb84faab40e030c34ec1fe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
registerMe
stopAd
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE