fff
mmm
sss
Behavioral task
behavioral1
Sample
8f89c6cfcc172c4b7e2d594c7a528360.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8f89c6cfcc172c4b7e2d594c7a528360.dll
Resource
win10v2004-20231215-en
Target
8f89c6cfcc172c4b7e2d594c7a528360
Size
13KB
MD5
8f89c6cfcc172c4b7e2d594c7a528360
SHA1
a73ed91dcf0d361ac9dc61f8cbffec69370be872
SHA256
cf6ba699a04b19daa9a47542bf39894465e456b9120681b5ad56ae39622a39aa
SHA512
77812a0a738b2793374331a7d050c3d16f9d27b9b415b609f9779ac1919e1087f02c0d9c9cc7151c86fbdbd55d248aa559553c688354a8005c6700cdbeafa407
SSDEEP
384:9yo/2BhtmHimBcMWAZS/NaNJawcudoD7Uf:5uB2C2cisQnbcuyD7U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8f89c6cfcc172c4b7e2d594c7a528360 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
fff
mmm
sss
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE