_Prog_HookAllApps@8
fnDLL
fnFND
Static task
static1
Behavioral task
behavioral1
Sample
3765e6c0c845ed8d5f7c2dc566e35d63.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3765e6c0c845ed8d5f7c2dc566e35d63.dll
Resource
win10v2004-20231215-en
Target
3765e6c0c845ed8d5f7c2dc566e35d63
Size
7KB
MD5
3765e6c0c845ed8d5f7c2dc566e35d63
SHA1
28129fd43f413a8db26ef33af3d9129feb741561
SHA256
1bc50599656d4cd1d5b6abdd4064ea679fc7d77a8ac9ce29530ca8b2206f8e36
SHA512
ae2ca9080d3a02745f92ba1bcc018d4e8d39c621f05539ca5e022753fe05a967998b8435542f5a5b78839d819bd29e4a5610c2aaadb532b2c0eaba952557d796
SSDEEP
192:zwngC4a4h2GiSmjVvja7SGXmEcU03cN8L7j3006d98+RG:z4gwlGMJC2203cWs06d2z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
3765e6c0c845ed8d5f7c2dc566e35d63 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_Prog_HookAllApps@8
fnDLL
fnFND
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE