?DelHook@@YGHXZ
?SetHook@@YGHXZ
Behavioral task
behavioral1
Sample
0e3603fb567999c4a334704621443987.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0e3603fb567999c4a334704621443987.dll
Resource
win10v2004-20231215-en
Target
0e3603fb567999c4a334704621443987
Size
9KB
MD5
0e3603fb567999c4a334704621443987
SHA1
a8abc1b9de5b79d8acf8e3cbb296b47232c553db
SHA256
fa60c41b6c57e4138560f968816056714aa754cdff0f13901388dde18ed509f7
SHA512
31c54c6ff9fac6e8ef62a7fe30418cd1abae6f5aa9168789d551dfc6a72473e0c6034b4c0c328d5513ac764d51aaf2f93bbb69b7898d210f1ce664079381388c
SSDEEP
192:OZS67c7v4pFsyDiV9mhjGwpIs+TpWJf1Li:r67c7vktQ9mxoTpWl1
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0e3603fb567999c4a334704621443987 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?DelHook@@YGHXZ
?SetHook@@YGHXZ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE