GetProcPointer
GetStructurePointer
Static task
static1
Behavioral task
behavioral1
Sample
2c05d283362b6034381e1ff42565410db6531758afc19a5824f4a00e5f2e8e1d.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2c05d283362b6034381e1ff42565410db6531758afc19a5824f4a00e5f2e8e1d.dll
Resource
win10v2004-20240709-en
Target
2c05d283362b6034381e1ff42565410db6531758afc19a5824f4a00e5f2e8e1d
Size
17KB
MD5
f39aac3eb03160a2d2c57bf164f55c53
SHA1
58a3321af34737cde72024ea3dc88ef80ef444e0
SHA256
2c05d283362b6034381e1ff42565410db6531758afc19a5824f4a00e5f2e8e1d
SHA512
589584cf6a88a33520fd45c4298273dc9b782f7448ce6e986c17d4037610c35a4783640bcb500518ac9bf7595df9ff3eaa0e2a4527105056544743022b38c5e2
SSDEEP
192:/XKcCqW4fu9xpXkhtCkKQwIVn70VqQkKCi+FKWeAE3+UQ1yQ/vqtDBb3Qy+9Dq4n:/acCq/blKQrcqQF4Cj3+UrBMyIgAXGK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
2c05d283362b6034381e1ff42565410db6531758afc19a5824f4a00e5f2e8e1d |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcPointer
GetStructurePointer
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE