_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
aa6c08d8df3e0ca6bc1a29b1764b83d9.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa6c08d8df3e0ca6bc1a29b1764b83d9.dll
Resource
win10v2004-20240226-en
Target
aa6c08d8df3e0ca6bc1a29b1764b83d9
Size
33KB
MD5
aa6c08d8df3e0ca6bc1a29b1764b83d9
SHA1
863ae19c0e47e83ffc6b26b6f664806e8a6b4a30
SHA256
14fc3eee6e690e00e495491b7951c13a1cae13bf7cc16d245ab61e742c2c3dd1
SHA512
aeaf58202a234556c6f1011965acc92435ba94320c75f445543a328f73ef0224907cd351f9c2c5d386a32c9821041ac7d0473288a4c4f7fe4cc4811974c88e84
SSDEEP
768:pnfVs2kLmjPHpbBvGZcgu6y5u/522i615T1+9uj4nbcuyD7U0uf:NVGLm1bdGpGuc2iy5TI9uj4nouy80uf
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aa6c08d8df3e0ca6bc1a29b1764b83d9 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE