ZpArchive
ZpGetOptions
ZpInit
ZpSetOptions
ZpVersion
Behavioral task
behavioral1
Sample
1dd25558e774f122e996fe905f3e20c2abf4c8b1a5912a8d86d2f449605eff29.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1dd25558e774f122e996fe905f3e20c2abf4c8b1a5912a8d86d2f449605eff29.dll
Resource
win10v2004-20231215-en
Target
1dd25558e774f122e996fe905f3e20c2abf4c8b1a5912a8d86d2f449605eff29
Size
325KB
MD5
b697294063ca6bdacc9f75b727f7cdba
SHA1
afb5133ad8e5065ecd9d74765a454bfac4fe541b
SHA256
1dd25558e774f122e996fe905f3e20c2abf4c8b1a5912a8d86d2f449605eff29
SHA512
4a7e7f5ad333e3cfc5eb25b35ea35fa4731472612a24a1d6147ee8a402d1c22cda38ac40d48db317461cc49f9b87465e33a2b5000571f310ac604bf0d1c0d912
SSDEEP
1536:i3C8wUcw1dwm8qlwn4iEv72oIY6bGkPwTufpXeTVZR3AWgCuNjC2WL2RoR:o0UXEfhEYbzPCTVZR3AWijGLMoR
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1dd25558e774f122e996fe905f3e20c2abf4c8b1a5912a8d86d2f449605eff29 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ZpArchive
ZpGetOptions
ZpInit
ZpSetOptions
ZpVersion
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE