BeInserted
Cosx
InsertTo
InstallHook
MainMonitor
init
init_FXRun
init_FXSetup
init_PPLiveRun
init_PPRun
init_PPSetup
init_SetReg
init_ZMRun
Behavioral task
behavioral1
Sample
7066d97a1d64309c049076eb408b9448.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7066d97a1d64309c049076eb408b9448.dll
Resource
win10v2004-20231222-en
Target
7066d97a1d64309c049076eb408b9448
Size
39KB
MD5
7066d97a1d64309c049076eb408b9448
SHA1
e3a2254f49ad14335423b537a2ddafc553dfef53
SHA256
eaf953b8577a5326086a8cd5452b8134857d15bd5a3e4c6326df53d8afbcefbc
SHA512
9b3b450804c6275623d7358b6fdfad0eb1da36e86b54f3912cad162ddecbe4d27023ea2f026150f40ff7fd7b1b5eb50c1345a83b874e54ceb228b7da2f4b0fe6
SSDEEP
768:8I3knUuCeNVZuUFDxzAWgfSIR0l6lPgZ7nGd25vJP91O2nbcuyD7UmA:lqVZuEBgilRZTvL1Jnouy8l
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7066d97a1d64309c049076eb408b9448 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
BeInserted
Cosx
InsertTo
InstallHook
MainMonitor
init
init_FXRun
init_FXSetup
init_PPLiveRun
init_PPRun
init_PPSetup
init_SetReg
init_ZMRun
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE