AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Behavioral task
behavioral1
Sample
33c606746aeef771133d84f320efb350a55afe1452dd342a8308a94a896d62d0.dll
Resource
win7-20240704-en
Target
33c606746aeef771133d84f320efb350a55afe1452dd342a8308a94a896d62d0
Size
437KB
MD5
1e2d491d085a0c7c363f9e1fe3e5dae9
SHA1
af373cc2bab0fb032f6a8708707bea58f375bde5
SHA256
33c606746aeef771133d84f320efb350a55afe1452dd342a8308a94a896d62d0
SHA512
29807fbb373569c6a7f08c2d11da49f5663502086aa8b9eef6099f26dd98692bbeef0090f74dc11902be1cdf49c0f92dc5ec26e10349ef1813e486ff39596963
SSDEEP
6144:bas0ZLc/IJvCklIqA8mvHwgnHJp9OWqw7zsK0bencTpX4KtjY5Jt/lt0zwzOu6WY:gBFJqk2q1g5ppemr0bAKoNfnQCSWpoSC
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
33c606746aeef771133d84f320efb350a55afe1452dd342a8308a94a896d62d0 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ