canto
mutobronc
peydeyra
Static task
static1
Behavioral task
behavioral1
Sample
b40149f79cb6749efcfd8dedf281351c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b40149f79cb6749efcfd8dedf281351c.dll
Resource
win10v2004-20240226-en
Target
b40149f79cb6749efcfd8dedf281351c
Size
45KB
MD5
b40149f79cb6749efcfd8dedf281351c
SHA1
61c83388045daf4b9dbde6eb1a81f5ae8a8d13f6
SHA256
a06ddd99f98cb9e024319b28cdda567fd86734d88a1ebfa95a43c944191f02a6
SHA512
00abc53fc1a1a3ea4a44489cd509b3fe7044d7416523b2507ff1d4c72700bde2d0169b98e6d242693d313cad12a44063e6db56a19d0325e2a6f0f1c2d88facfa
SSDEEP
768:oGSJm0aJlzTL1Zz8/90hAn/x37eZjQMN2Hq7XmMzaGH79wB44gk9a6gxSA5su8bM:kElzr8/9iGp37eZcMYyv9Ugk9a6g46s6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
b40149f79cb6749efcfd8dedf281351c |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
canto
mutobronc
peydeyra
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE