AlphaOutPlugin
ChangePluginListNum
ConfigPlugin
ExitPlugin
GetPluginAuth
GetPluginCaption
GetPluginDesc
GetPluginVer
InitPlugin
MaskPlugin
SetPluginAppActive
SetPluginAppDeActive
Behavioral task
behavioral1
Sample
53d0cb45f964c03bded5e6d089a42940N.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
53d0cb45f964c03bded5e6d089a42940N.dll
Resource
win10v2004-20240709-en
Target
53d0cb45f964c03bded5e6d089a42940N.exe
Size
331KB
MD5
53d0cb45f964c03bded5e6d089a42940
SHA1
ec9e35d2281658c8d75cfa8d0fce8e7d5f0aa92e
SHA256
6fc99d026a7d55c228f488550d6a0424f6575e9648acfdc02c093e5efe3cf705
SHA512
e35bfe7dce0afd56e61fac75358c56ec12b7f3af3f716f4d51ef143a84172b72fdf00f8c00e76c2f0604594b31f5a00a6c5d71f2fb8d9e3b4d3ae2eb186d1eec
SSDEEP
6144:VGR+02jnFt8dq88ivTXXiosR/35P+kJI2n/6C3NRkFPIQT9a29U:f02nErTXXerP+kJJnNTkz9a29U
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
53d0cb45f964c03bded5e6d089a42940N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
AlphaOutPlugin
ChangePluginListNum
ConfigPlugin
ExitPlugin
GetPluginAuth
GetPluginCaption
GetPluginDesc
GetPluginVer
InitPlugin
MaskPlugin
SetPluginAppActive
SetPluginAppDeActive
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE