BeInserted
Cosx
InsertTo
InstallHook
MainMonitor
init
init_FXRun
init_FXSetup
init_PPLiveRun
init_PPRun
init_PPSetup
init_SetReg
init_ZMRun
Behavioral task
behavioral1
Sample
3b65853511c2b8e89721b492923dc093.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3b65853511c2b8e89721b492923dc093.dll
Resource
win10v2004-20231215-en
Target
3b65853511c2b8e89721b492923dc093
Size
40KB
MD5
3b65853511c2b8e89721b492923dc093
SHA1
69420302711f835631e96630ba03814294f9d984
SHA256
946e0460f9fe02665bf5c6f57335636bffb9f8662e50f211540bbfeda62b8037
SHA512
e659fe0042f53efc2de51df3d663fda82bcf14caa0066dc9ef3584e5d41ad30bccff55d84b02b07058d7c6d3c1bb8feabeae7fbeabe90ad76b118e6850313d73
SSDEEP
768:d9oLxylheojmGha4R3b9baX463QJjbfKSzdTHiLJWuvnbcuyD7US:TfE4NsXNQZCAdTHiLJRnouy8S
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3b65853511c2b8e89721b492923dc093 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
BeInserted
Cosx
InsertTo
InstallHook
MainMonitor
init
init_FXRun
init_FXSetup
init_PPLiveRun
init_PPRun
init_PPSetup
init_SetReg
init_ZMRun
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE