BeInserted
Cosx
InsertTo
InstallHook
MainMonitor
init
init_FXRun
init_FXSetup
init_PPLiveRun
init_PPRun
init_PPSetup
init_SetReg
init_ZMRun
Behavioral task
behavioral1
Sample
0555b25e5cb3dc4faeee72f76030e419.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0555b25e5cb3dc4faeee72f76030e419.dll
Resource
win10v2004-20231222-en
Target
0555b25e5cb3dc4faeee72f76030e419
Size
41KB
MD5
0555b25e5cb3dc4faeee72f76030e419
SHA1
ad33db0913ccce3d53ac7d7760907838a26f5779
SHA256
a52f7ae70b03b0f6f158b11eddc1527ce2b1565bee955431a35a0da670701e71
SHA512
fe787c31bb6ed26b0f0c5ec90f8bc58ca49fe3aed676fe6ae409a4460f57c3fce99b5492ca90dd31478dae23f621412f8f573e423bf0299ca1c2807cef994ba4
SSDEEP
768:KhdoLwe9gxoNTkiJ5K6k1Py1pRkcQggxJKGqNpZT1ZpMUOoCrDLfQ7IanbcuyD7Z:woLx926Tk+K6kpyacPgWpZ/aUOoiHfQs
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0555b25e5cb3dc4faeee72f76030e419 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
BeInserted
Cosx
InsertTo
InstallHook
MainMonitor
init
init_FXRun
init_FXSetup
init_PPLiveRun
init_PPRun
init_PPSetup
init_SetReg
init_ZMRun
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE