ClbAddData
ZALVQOQI
ClbSetColumnWidths
ICUTUQES
ServiceMain
Behavioral task
behavioral1
Sample
b6f2b0133c1bfd73f02ad72fdd221d46.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b6f2b0133c1bfd73f02ad72fdd221d46.dll
Resource
win10v2004-20240226-en
Target
b6f2b0133c1bfd73f02ad72fdd221d46
Size
61KB
MD5
b6f2b0133c1bfd73f02ad72fdd221d46
SHA1
423868b8a76cb69257b1dfda4ea7377b4d02c8d6
SHA256
7295147329ebd892aa1905794c2dc9af02a187481fd4b48ab120339f74b7be01
SHA512
c4631915acb8585120f7d9d040c3bcc564f536f36fcbef4cf27d17a6e0717bfe0a0d8fd0018b02f2ca8870c3f3331f55076d68f3312fbf7c30be82ca9afbc0a1
SSDEEP
768:LBgjoN3SzpAXDlkScoUi/R3PnFVmp/ZEz5:IoN3ykVPX71
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b6f2b0133c1bfd73f02ad72fdd221d46 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ClbAddData
ZALVQOQI
ClbSetColumnWidths
ICUTUQES
ServiceMain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE