InitObjects
UninitObjects
WriteCommand
Behavioral task
behavioral1
Sample
27143e488d0ae16f5c0b2e6e405364bc.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
27143e488d0ae16f5c0b2e6e405364bc.dll
Resource
win10v2004-20231215-en
Target
27143e488d0ae16f5c0b2e6e405364bc
Size
6KB
MD5
27143e488d0ae16f5c0b2e6e405364bc
SHA1
b31ef6092345ede6d6960876e8a60412c77fdaa9
SHA256
81b20269f40fa088b86c3d6f42095a1d5ef482f3e8c331a2d178db8ba2ab3b97
SHA512
77ec97b2fccd13c9bd38889052abb872c6d823419548e881f8e78169db01e78ef0b782548ddd5a6e99ebb1b1cdd00e15d565449f39ab8345136ad559f2767bdd
SSDEEP
96:DXs99nWYLxsqucUJEKyzVjyxoEwmVRODAALc6sof:DXs9l9LxsySzyz1yPVRGXc6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
27143e488d0ae16f5c0b2e6e405364bc |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitObjects
UninitObjects
WriteCommand
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE