?GetFile@@YAHPADH0AAKAA_JH@Z
?GetFileWillBeLong@@YAHPAD@Z
?InitializeDll@@YAXPBD@Z
?SetParams@@YAHW4CSTYLE@@PAD@Z
?dll_breakflag@@3_NA
?lp_SetProgress@@3P6GXH@ZA
Behavioral task
behavioral1
Sample
a380576572ca1a7b23ea2c05fbdadfa4.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a380576572ca1a7b23ea2c05fbdadfa4.dll
Resource
win10v2004-20240221-en
Target
a380576572ca1a7b23ea2c05fbdadfa4
Size
188KB
MD5
a380576572ca1a7b23ea2c05fbdadfa4
SHA1
3755d18417b1338d5fe1b3560480a3fed558be08
SHA256
9a55de57f24a2ed96759a8e8cef0470ff09e79174dfc7220d36a586c4ecdb01f
SHA512
58352bbee22a2a3a37547f398924b447601a9d9dae532d04255f5524c4bad913ea48a142880f2cbf2b36fb28d2820d1fe967c5a9e5ccfc56c9b04dbc7da5ba48
SSDEEP
3072:naUfLpn9ocdukzaOjBh8nSf35/IexSzGbflbD+fDyBGdx6Mxo8tsSVNXRyz1s4ml:nXDp9ocdHjySP5V7l/+8GdxNq8tfVNBn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a380576572ca1a7b23ea2c05fbdadfa4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?GetFile@@YAHPADH0AAKAA_JH@Z
?GetFileWillBeLong@@YAHPAD@Z
?InitializeDll@@YAXPBD@Z
?SetParams@@YAHW4CSTYLE@@PAD@Z
?dll_breakflag@@3_NA
?lp_SetProgress@@3P6GXH@ZA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE