Cobble
H9922
Inky
Mouth
Oscar
Behavioral task
behavioral1
Sample
VirusShare_0a0b51cc7c2f01c59e8b45b7a53686cb.dll
Resource
win10v2004-20240508-en
Target
VirusShare_0a0b51cc7c2f01c59e8b45b7a53686cb
Size
151KB
MD5
0a0b51cc7c2f01c59e8b45b7a53686cb
SHA1
61261bd3d84cf71113ccfd962be5c67f64c0e74a
SHA256
a941d1c84776b29324af06e737e8360b705db59791fb4d7df992e83a97056f1d
SHA512
af69557c095f17461d171eb55203e5095c79afc24b1f65d4cecd2879548786352659c7d3c1629a33e2e51a359165dd94b6e481c7d088235f59234a6477f4e9e3
SSDEEP
3072:0xZiF57X6i7Uu9Inmz76htqJ+rTeJEuCc6ouXt:V5T61u9amzM0kTiCc6okt
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
VirusShare_0a0b51cc7c2f01c59e8b45b7a53686cb |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Cobble
H9922
Inky
Mouth
Oscar
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE