fff
mmm
sss
Behavioral task
behavioral1
Sample
6480c9a986634026c27af93a0b0ac8b0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
6480c9a986634026c27af93a0b0ac8b0.dll
Resource
win10v2004-20231215-en
Target
6480c9a986634026c27af93a0b0ac8b0
Size
13KB
MD5
6480c9a986634026c27af93a0b0ac8b0
SHA1
9daadf1efdaa55986603a8ce9b33eb5f42bf41c7
SHA256
7e3aaa95fbf3e0db7a4e7bc7c2cec5a7cd234e4b149f60ae66826b721884be96
SHA512
4dfc7cca9a004e991271253201de74a30a69fff68356f04e3408fca736ec948142be4540aafc0ae70df310cee6a7211374361fe8887f9a764c2690f6b870782e
SSDEEP
384:9o/2BhtmHimBcMWAZS/baNJawcudoD7UE:+uB2C2cis+nbcuyD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6480c9a986634026c27af93a0b0ac8b0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fff
mmm
sss
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE