InitObjects
UninitObjects
WriteCommand
Behavioral task
behavioral1
Sample
221b3664f1b1f58ddaa8a3a7d42ebdaf.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
221b3664f1b1f58ddaa8a3a7d42ebdaf.dll
Resource
win10v2004-20231215-en
Target
221b3664f1b1f58ddaa8a3a7d42ebdaf
Size
6KB
MD5
221b3664f1b1f58ddaa8a3a7d42ebdaf
SHA1
7996f5719811ccd98e990988a08bceb5fab45aca
SHA256
0f4b7b8392159eb9b37bb2d1ce4770d65b941cc4818dd180144a7050e20b1757
SHA512
49bc5ddbbfa38e2f482f0e14982a6d9c21aa5c2a92decd8ba45af9ce31f469d47fd40549d6bb5fbf936abe80d180f0b1cb42487713f8168074a839a5fa97cd2c
SSDEEP
96:D+1RyArCHaT0KHoVJFQvbG0/4iZ9HBz9dup3fjFYB:D+1Rhz0KIVJuvC0/L9HZnup3fj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
221b3664f1b1f58ddaa8a3a7d42ebdaf |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitObjects
UninitObjects
WriteCommand
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE