?NXSigningResource@@YAXXZ
?WM_XLISTCTRL_CHECKBOX_CLICKED@@3IA
?WM_XLISTCTRL_COMBO_SELECTION@@3IA
?WM_XLISTCTRL_EDIT_END@@3IA
udop
ufsta
ufusr_ask_unload
Static task
static1
Behavioral task
behavioral1
Sample
72f956ee0417290c9883021866d84b61.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
72f956ee0417290c9883021866d84b61.dll
Resource
win10v2004-20231215-en
Target
72f956ee0417290c9883021866d84b61
Size
1.1MB
MD5
72f956ee0417290c9883021866d84b61
SHA1
6745ba90900adcaeb67a1e65603300f81361a5ea
SHA256
8befd37642794976d3535b66264b7f2189ea8da354a3433f2d30b299299943b6
SHA512
9603cabebd29ef5a81bd0ea252686906557b0bdee27d49706a6ecf91962dc6f4045c3e86cba3e8046be4b5f569cf0d81bbf89723fde3cfc88dbf8755f91d6fbd
SSDEEP
24576:v7Zm3OE5Z0Iip1GQ2BXDUYB4+M4d4TWdTS:9mxPPiHGQ2BX4YKzkpVS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
72f956ee0417290c9883021866d84b61 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?NXSigningResource@@YAXXZ
?WM_XLISTCTRL_CHECKBOX_CLICKED@@3IA
?WM_XLISTCTRL_COMBO_SELECTION@@3IA
?WM_XLISTCTRL_EDIT_END@@3IA
udop
ufsta
ufusr_ask_unload
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE