ResetSSDT
ServiceMain
Behavioral task
behavioral1
Sample
3cc33b66c870e354c5daeae7076b0cb4.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3cc33b66c870e354c5daeae7076b0cb4.dll
Resource
win10v2004-20231222-en
Target
3cc33b66c870e354c5daeae7076b0cb4
Size
45KB
MD5
3cc33b66c870e354c5daeae7076b0cb4
SHA1
992046699dac2cf985b27be662eae336c0b02856
SHA256
2aeb39eb553beb8fc0b3ed0a82c63818cba21fef62d4a041dbae49cdab0e6526
SHA512
2bb29afc94bbfd1c1e026c78999e6a678c7e74c14d49a0c080c066e55f75cb4f0ac58cdcba3e5b5483dd173076eb10bb7652ead4593e8ca44e7889bc505573c6
SSDEEP
768:btQOJzjNhBG/5Oyqhw3m82lZklS2EuG8fgi4ThnelCsHnbcuyD7Uocsg:JxjY/Ls382lZkl38rEHnouy83s
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3cc33b66c870e354c5daeae7076b0cb4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ResetSSDT
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE