polnoe
wddermo
wdgovno
Behavioral task
behavioral1
Sample
0cfa84dad93271ea03961118cf554225.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0cfa84dad93271ea03961118cf554225.dll
Resource
win10v2004-20231215-en
Target
0cfa84dad93271ea03961118cf554225
Size
12KB
MD5
0cfa84dad93271ea03961118cf554225
SHA1
a5b1ff993338a444586d76d8f01da8fa8fe24503
SHA256
9065bc464c890d30ec1beedb2474463e41f523c43d2756466bb75883a06ef50a
SHA512
f504f9c8cb860a4c5bf4c8e9a3d387f50a7405503265ea58a5ec32738a117bb36456d3a7f962f70f7efb3290fe445bc6f96143d0a92543c083a3cd9ea55ba4b6
SSDEEP
192:clbfR9SkDEPmOdeCXRqqM9Gp4eto9J6UnECO4/vmeB2hc0fDreGA5MJEG:EbfXF8/lMgp4ei/3ENVhcQCMJEG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0cfa84dad93271ea03961118cf554225 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
polnoe
wddermo
wdgovno
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE