SetKBHook
StopKBHook
Static task
static1
Behavioral task
behavioral1
Sample
01e698fee8f651902bceb7a5fff6fa53.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
01e698fee8f651902bceb7a5fff6fa53.dll
Resource
win10v2004-20231215-en
Target
01e698fee8f651902bceb7a5fff6fa53
Size
24KB
MD5
01e698fee8f651902bceb7a5fff6fa53
SHA1
b13e86e5f5058bf3a533e41b5aa6f3ebf12af78c
SHA256
40449a409af17f1fde67e7972bbbfe4c0cd78a8e54e3425310c58370c2b3d1f2
SHA512
a12c9a1a2b7b4533caec667f085b7f4b5e88c372d4b78ce590025762346fd9bb510d758b1d07870540886742e9e0b8d51584b88e33b87b320695e85a569fda2e
SSDEEP
768:ANRSAeRJIRAe8oF1GYLJQF+Kcbk5CcCfKSuhRyzNl:ANITwn1GYLdtg5MNl
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
01e698fee8f651902bceb7a5fff6fa53 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetKBHook
StopKBHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE