Update
install
reserve_init
Static task
static1
Behavioral task
behavioral1
Sample
60c06916df0d48bee5e68e68ad1c545c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
60c06916df0d48bee5e68e68ad1c545c.dll
Resource
win10v2004-20231222-en
Target
60c06916df0d48bee5e68e68ad1c545c
Size
13KB
MD5
60c06916df0d48bee5e68e68ad1c545c
SHA1
66aaaa9e1379f6005093da5d81f3400522a507c8
SHA256
7bfc15da5a7dc36b58a904ee3f9f0163836d66e452e6017877d646be772f8945
SHA512
5e41383105f317950af56af5d6d5febe66f8b7c394151b20ec35ae357077703a94f0ccd088993126f75f00bbad8dbfd9c88d35b44d4f4ed5239fb9065d7ce1d1
SSDEEP
192:Omjy3q4UAt43dIt4Hivee7+P75DdYftcBw8nlBD6kLWC5HKHTX/Rmv:OhzlGHivyP9Dd8tqw4uot5qzvgv
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
60c06916df0d48bee5e68e68ad1c545c |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LoadLibraryA
GetProcAddress
GetLastError
DisconnectNamedPipe
Update
install
reserve_init
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE