InstGetMsg
MyCallWndProc
Static task
static1
Behavioral task
behavioral1
Sample
14061dda22c22b4c4a9bd26393c17178.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
14061dda22c22b4c4a9bd26393c17178.dll
Resource
win10v2004-20231215-en
Target
14061dda22c22b4c4a9bd26393c17178
Size
14KB
MD5
14061dda22c22b4c4a9bd26393c17178
SHA1
a8cdc70a73ca86bb0bb3c179cee74e6728c3271c
SHA256
b17e9180160631ba4a52d0044c69f93d41873aff5c59e4d118a7a7a243f38fbb
SHA512
c0aa2b4e70a885a40cd5e3461b4d806f2e0ab6a687bbdf5cf2957196389173b67dec32156387143a48c88d29b0d1c52cbff7cc942618be1556ca99e0e92fec24
SSDEEP
384:+EmKlpzujW/p1A8Ck3kEUFSHCgWAPCWr:+MpKjWx10EU0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
14061dda22c22b4c4a9bd26393c17178 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstGetMsg
MyCallWndProc
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE