jjj
kkk
xxx
Behavioral task
behavioral1
Sample
aba9a75686527c3413b9bdcc86a95836.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
aba9a75686527c3413b9bdcc86a95836.dll
Resource
win10v2004-20240226-en
Target
aba9a75686527c3413b9bdcc86a95836
Size
12KB
MD5
aba9a75686527c3413b9bdcc86a95836
SHA1
059a043caea08502df1a733952494e1de423edbc
SHA256
3db8c19ee039550b15efd234fd4e6aa18855a622ba627e0adc093ff72951de6f
SHA512
2a243622c7bba214bd60ac6ca0fcdd547889a0845815853724ab9094751927c750663faa1c5c97d9c8398ff97d9fb7f54b7d34de522a975f0d0e645eb8df47d5
SSDEEP
384:CYOKZjgz7B1cPhOwU/TeVaNJawcudoD7UVw9:CYJq4hOh/yInbcuyD7UVw9
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aba9a75686527c3413b9bdcc86a95836 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jjj
kkk
xxx
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE