GetMsgProc
�汾
Static task
static1
Behavioral task
behavioral1
Sample
82a36566466c609032ed57671ac1596c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
82a36566466c609032ed57671ac1596c.dll
Resource
win10v2004-20231215-en
Target
82a36566466c609032ed57671ac1596c.bin
Size
97KB
MD5
82a36566466c609032ed57671ac1596c
SHA1
a6bc984f69223536aa02d24ffb3d27df873ed22a
SHA256
e66e52a6d33f40016f84cb9521bc9cbfc3e7e81837684090e5fab9918a32c9ba
SHA512
5a4ec176edd1df4ee1f81f1b924f192ba3581a46387cac459b9566ae60428cb12d0680c9cf866809a5b3bbaebb39d6ef7f0c7280dfd087934a174154645f84c5
SSDEEP
3072:v/8Li7f5C/ZhrQcV3gkLq+sKF2RX4f1kMlwCm:B7f5EnrNHyRGU
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
82a36566466c609032ed57671ac1596c.bin |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetMsgProc
�汾
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE