CreateVhddFile
CreateVhddIOObject
Vhdd_SetErrorBuffer
Behavioral task
behavioral1
Sample
cd2abf2fe60015ff24c0ccbe6220f788d9556098810107e947602efbd9a5de0a.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd2abf2fe60015ff24c0ccbe6220f788d9556098810107e947602efbd9a5de0a.dll
Resource
win10v2004-20240412-en
Target
cd2abf2fe60015ff24c0ccbe6220f788d9556098810107e947602efbd9a5de0a
Size
72KB
MD5
2913f79bc1419312abba9414f2423049
SHA1
a0b988bbf2419eb8ef6c816dab2e4a3c9514b4c4
SHA256
cd2abf2fe60015ff24c0ccbe6220f788d9556098810107e947602efbd9a5de0a
SHA512
92ba4c89077b1e34d41cf61ea208a355d3620635d1791b5a72bbe63cf99564c10ff60848ceffff3e03381ff16692c9efe9d877e5154e9de7f715a0de006cdc0b
SSDEEP
1536:oGkFV703OkoTm2sQysrK3FD+ZY1zwjiwJ+F3hEVNBZ8/o6PrUwznouy8HA:oGUGH28srKFyFOYQQEXDbLoutg
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cd2abf2fe60015ff24c0ccbe6220f788d9556098810107e947602efbd9a5de0a |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateVhddFile
CreateVhddIOObject
Vhdd_SetErrorBuffer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE