ctxnh
fxuvdtqwup
gjmmaihrn
Behavioral task
behavioral1
Sample
bd66cc8d3d9c4374bf091b7bfd8deb0d.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bd66cc8d3d9c4374bf091b7bfd8deb0d.dll
Resource
win10v2004-20240226-en
Target
bd66cc8d3d9c4374bf091b7bfd8deb0d
Size
79KB
MD5
bd66cc8d3d9c4374bf091b7bfd8deb0d
SHA1
98b794cd5c56a9061fe250a135e66ca6c0295e68
SHA256
c150afbd967b302e8d4517dcad00131ac62c417f64675a8c848a99b09434a861
SHA512
b578dd01e201f8cfaab357c7263669adc443984397f3a9a18587f9f16cf9d3b946a31dbe03211f180ee0f3c0f958d4b71ca61ca6be8c2baf461de5ced10f1d56
SSDEEP
1536:l2yAipxF3etjw1MSw+BWA66RIzWdTIhfo3DCDoC1lg6CInouy8QE:l2y5xF3KsBWA6+6hfGCDoEuDgoutQE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd66cc8d3d9c4374bf091b7bfd8deb0d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ctxnh
fxuvdtqwup
gjmmaihrn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE