_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
0a44c7100a894741281a92e39e3bdaef.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0a44c7100a894741281a92e39e3bdaef.dll
Resource
win10v2004-20231215-en
Target
0a44c7100a894741281a92e39e3bdaef
Size
34KB
MD5
0a44c7100a894741281a92e39e3bdaef
SHA1
92a8a0dd01079fd9de0d0bb7da8c76a3dda571da
SHA256
921fd29bde55fd08756e07fd612ec5021b60c2720bf7ba5c71955071925a1ad1
SHA512
5cdc5a2eb9420146630a3340476a1bc3bb41cc92653ddf96dd741818df4e0f6ae1baa66e69b230c74b41dc1ee9e9842b7656613fcf639394a0ae1e40055abe7e
SSDEEP
768:tRmLptL/etwuEorYcT4ILW6PmeMcivK+a2XvCRidc62Lkp97slU5F/6nbcuyD7Uy:tELp43E8/akmeJiCHX22I7Mi/6nouy8y
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0a44c7100a894741281a92e39e3bdaef |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE