Covet
F1122
Fool
Foyer
Mills
Behavioral task
behavioral1
Sample
7199e989067712496adf3162f78c6ac6.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
7199e989067712496adf3162f78c6ac6.dll
Resource
win10v2004-20231215-en
Target
7199e989067712496adf3162f78c6ac6
Size
189KB
MD5
7199e989067712496adf3162f78c6ac6
SHA1
0b06ae4d946f50d77969a1ea7f11bcb78b090b55
SHA256
acfac4a9bdb8c506483542bda09f7dc9e20493de7cf7660391153b48aaba16f5
SHA512
b02160993cee524fdc907b89dbdfef2611920272ee75d77115e66616a3e111aab56eef9b18eb7c4737062cddd7d608cc5d4f12241b7cc0618fe54907dad3741e
SSDEEP
3072:m2ksLO+lJ8VDm6xbKk2Gd+BXYleFm6ZuL88Eh90HmownN9d40uZ7xAPx3dDQJ2U6:kN+luZyQ8MqAL8F90HXyfd4N2Z4oS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7199e989067712496adf3162f78c6ac6 |
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Covet
F1122
Fool
Foyer
Mills
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE