Go
Heart
M0ZHE
On
ServiceMain
main
Static task
static1
Behavioral task
behavioral1
Sample
58056fda629afc7d3a9df147f584e11f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
58056fda629afc7d3a9df147f584e11f.dll
Resource
win10v2004-20231215-en
Target
58056fda629afc7d3a9df147f584e11f
Size
62KB
MD5
58056fda629afc7d3a9df147f584e11f
SHA1
0eab0c1c6b8daa64969854aaa87bc07fb4751aac
SHA256
3e20630a9141956608983d151a8a44745225d608ccaefe0d8dbbf6d4d1a2801a
SHA512
599be5bf48e67fa56b74ab8d2acd017cb924ba7091b727f02f756735959a0366f5cfa8d25eb5051b8dda9522cd1ccd0fc64ac24852464f6bd71aaffb332dd34d
SSDEEP
1536:pnaJcSDTa6BebceS8NBZyVoz6Pe3HwGxh/tdG/8quPQB+yB:p/6AbcEvyVozG7GxhFdG/BnBt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
58056fda629afc7d3a9df147f584e11f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Go
Heart
M0ZHE
On
ServiceMain
main
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE