FreeDLL
InitDLL
_u
Static task
static1
Behavioral task
behavioral1
Sample
0ac71f8ffeaac6bd107ad28c58b47334.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0ac71f8ffeaac6bd107ad28c58b47334.dll
Resource
win10v2004-20240508-en
Target
0ac71f8ffeaac6bd107ad28c58b47334.bin
Size
739KB
MD5
0ac71f8ffeaac6bd107ad28c58b47334
SHA1
e76586fbf0f3f20a81b1252bb1b0f28f3c8150b2
SHA256
c96658effa6a6ac682f5496f7aebee807765b80b43fead53b8b819aac952abf9
SHA512
3ca07a374ae4babb326800ec5e66edf08ad526426f00de9b06f7d77dbd4a80207d0fa42caff3f9e1b8371b56ed8cff44088ac52651ff83d047981884815a1de7
SSDEEP
12288:Cbwt1aFywO4n1X1uamS5PiTOWE2Gl6tztZ/RkMTl5BS4/Qe+yI6o49jeiJPcimrZ:CbIUFFOe1X1bz5P8OotZ/6M3BSXyI6oE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
0ac71f8ffeaac6bd107ad28c58b47334.bin |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
FreeDLL
InitDLL
_u
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE