ResetSSDT
ServiceMain
Behavioral task
behavioral1
Sample
4daf48ef0863b57251b940a2a899f758.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
4daf48ef0863b57251b940a2a899f758.dll
Resource
win10v2004-20231222-en
Target
4daf48ef0863b57251b940a2a899f758
Size
46KB
MD5
4daf48ef0863b57251b940a2a899f758
SHA1
1e940f7c3d1e5ed3943fa5f9f94ba0738e754d24
SHA256
33f980ae4453e7d02ae158b2acfcf45aeaf3e3a91ba75838e9e325b0ebd67150
SHA512
73aedd1cbb784beb52eddf114fb9eede0fbf71df4c525359f95ee87fb80f13cbdcc8209ca0fbf8d0210e89ccb4a4be1cc120302e12084a264393ed3c2f7c73c4
SSDEEP
768:bh7WMbG9fblxnw39/L1z11H55QpVc92EQYX66pfPhyVWRh1NVcVZnbcuyD7Uz7O:dtYXC/L1d5QpVq2EQGfPsV2VcVZnouyQ
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4daf48ef0863b57251b940a2a899f758 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ResetSSDT
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE