jjehzoa
vabefpxrisb
Behavioral task
behavioral1
Sample
5b052dcfeecae6d41980757d12654f5f.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5b052dcfeecae6d41980757d12654f5f.dll
Resource
win10v2004-20231215-en
Target
5b052dcfeecae6d41980757d12654f5f
Size
89KB
MD5
5b052dcfeecae6d41980757d12654f5f
SHA1
02bd4e3679a56975119977bd03e1781a99c8d0a6
SHA256
ddc7ff14cf7967eb019749a326b340a356180ea27ac3131834108c9c4a15a004
SHA512
f717c6745d15822ee039fe8ce5d0ec0659bbb8781b61a2ba949c8ce045f875cf49a05f1fd116e37d3a4b396a37e36fcb01ae272f3380b43a296e320e69f70037
SSDEEP
1536:bmS6Tkd5VQprFqnxgvPchG+jtW9bzsNYSVCIqISFc3uWGHkDnB6ssAjHz2Lr31Lf:bmlYd5VEJSxgjQtW5gxM5euZEDnWkTUN
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
5b052dcfeecae6d41980757d12654f5f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jjehzoa
vabefpxrisb
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE