CreateVdiFile
CreateVdiIOObject
Vdi_SetErrorBuffer
Behavioral task
behavioral1
Sample
964bf823d0bfa6b957c79f0e41d6efac27104e9aa9f5756d5ae69167491c7f7e.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
964bf823d0bfa6b957c79f0e41d6efac27104e9aa9f5756d5ae69167491c7f7e.dll
Resource
win10v2004-20240412-en
Target
964bf823d0bfa6b957c79f0e41d6efac27104e9aa9f5756d5ae69167491c7f7e
Size
43KB
MD5
785fc2866b436a9ad6d395d4e9f161ec
SHA1
4b0b2af492c175dcaafa966711a6eef1899b9b9e
SHA256
964bf823d0bfa6b957c79f0e41d6efac27104e9aa9f5756d5ae69167491c7f7e
SHA512
ddba96573a5673f2b09c7c4caf3ad7654709a5111a2ab86d84aca1379c2585542be1ff4485af9d7376df4f7a9fee42e539ecad8c35f745b34a7c69f2789a654f
SSDEEP
768:lfeHhntWfnMkoCAYFEAcTj/MNsxS7iv6/Fw9TLv7AnbcuyD7UA:teHhsfnMkdV6/Mh7ii/FqLknouy8A
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
964bf823d0bfa6b957c79f0e41d6efac27104e9aa9f5756d5ae69167491c7f7e |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CreateVdiFile
CreateVdiIOObject
Vdi_SetErrorBuffer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE