HEEnterWindowLoop
HEEnterWindowLoopInNewThread
HESpecifySettings
Behavioral task
behavioral1
Sample
A-Ray Scanner.rar
Resource
win10v2004-20231215-en
Target
A-Ray Scanner.rar
Size
349KB
MD5
83e22240350c24d51489a3006263b9e7
SHA1
88c868ba08e64658fa8c9ba5f61a9aad85a1110e
SHA256
d910ea0cb397c8a95190ade8076b618e4736e79d32b1f95a9a039134399ea109
SHA512
37d57a4a65cd1c95c6f3081f87b29e4f8b6b940c09e5864fe65302f82d747ffa15712a3d943f9a8de8a9418fede762b140641e28dff7ec9f8b617afab94f65eb
SSDEEP
6144:ZR7CNam5g3S+o5M4pmTUsW9ifDZ3UoXUz6mNrWks4s/8FYnqhr:ZReNaCP+opmTU7YDNUl6mNV/s0vd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/A-Ray Scanner/16Edit.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/A-Ray Scanner/16Edit.dll | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/A-Ray Scanner/16Edit.dll |
unpack002/out.upx |
unpack001/A-Ray Scanner/A-Ray.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
HEEnterWindowLoop
HEEnterWindowLoopInNewThread
HESpecifySettings
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE