BeInserted
Cosx
InsertTo
InstallHook
MainMonitor
init
init_FXRun
init_FXSetup
init_PPLiveRun
init_PPRun
init_PPSetup
init_SetReg
init_ZMRun
Behavioral task
behavioral1
Sample
b7ea69fd260856edc0f2d79105da0c75.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
b7ea69fd260856edc0f2d79105da0c75.dll
Resource
win10v2004-20240226-en
Target
b7ea69fd260856edc0f2d79105da0c75
Size
40KB
MD5
b7ea69fd260856edc0f2d79105da0c75
SHA1
fc863567e5950edc07e69feafa37a356b4a2c3ab
SHA256
7c43118eedc1579312d4c7e50c865d9042cf514370c7e1cefc3d23d892ba0a91
SHA512
4536488a7ab5cde1f801059dae14af2ecbe502ee10f0e902d5bc285508b8b9319f0d24694819c05b7ff2d7877c4efacb19f6cd362699827ed7c0c83338043a24
SSDEEP
768:B33wfvZ3zw40tiK1MoAyfRtzU6LydEH56gKLO5dQnbcuyD7Ue:VgBzwUEMhyfzPydEH56zOwnouy8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7ea69fd260856edc0f2d79105da0c75 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
BeInserted
Cosx
InsertTo
InstallHook
MainMonitor
init
init_FXRun
init_FXSetup
init_PPLiveRun
init_PPRun
init_PPSetup
init_SetReg
init_ZMRun
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE