InitObjects
UninitObjects
WriteCommand
Behavioral task
behavioral1
Sample
2cc81ca712202052267992c63a545144.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2cc81ca712202052267992c63a545144.dll
Resource
win10v2004-20231215-en
Target
2cc81ca712202052267992c63a545144
Size
5KB
MD5
2cc81ca712202052267992c63a545144
SHA1
d85d83400d8d2f712acfab35735c3f75aa3d3ffe
SHA256
32cc5d42c51f65466ae0c72e4fc6c0891f30843dcc9a99a89d75d2dbecc0897b
SHA512
cc52d894363efb9419c3334e3a44b70b58c61342f500a360142fda5b2f154b633bd3e95acc9e617ac0b7bde5b3fc2d5d0de6cfdfbd36f23a24ed0a8edeab26a8
SSDEEP
48:6KBR3WaF0qUZZwYvUK/VwRkn5KEInmERx/v+3sSm+jxsimkwKaoiKKaV/ZbSecJQ:JW3qjYv135Kfm+xH0rqca/KLVWygu
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2cc81ca712202052267992c63a545144 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitObjects
UninitObjects
WriteCommand
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE