CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Setup
Behavioral task
behavioral1
Sample
e190ea771517b0e6a74665e6fef7e36a.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
e190ea771517b0e6a74665e6fef7e36a.dll
Resource
win10v2004-20240226-en
Target
e190ea771517b0e6a74665e6fef7e36a
Size
274KB
MD5
e190ea771517b0e6a74665e6fef7e36a
SHA1
e507806aba36b4fa4e92ef70dc650a7420977a89
SHA256
eb02c139ca800ed2f42e4bce116aaf37ee208811065bea185bbd7f111e77c6c3
SHA512
c6715faa933ac54f4fb058a0cc82933e146502f6d507b3f180d8ec253c5c91a8b0993ce8ffa6962bd1d2fe5f6d736d288f559605060d0949af605449feb2f11a
SSDEEP
6144:6Lt/XsiX7S+nqKA7i/6bxYm/v3ueMMW+z4tjAZ8ffzvmZvytm:cZTG+nqq6bxr++kt6gzv8v4m
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e190ea771517b0e6a74665e6fef7e36a |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateMainProc
CreateProtectProc
DllCanUnloadNow
DllGetClassObject
RealLogoff
RealLogon
Setup
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ