AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Behavioral task
behavioral1
Sample
a494a9258d9191755ed361bcd2ff47f0fba5ae1686d6ef824a0d7f4331d9ec65.dll
Resource
win7-20240704-en
Target
a494a9258d9191755ed361bcd2ff47f0fba5ae1686d6ef824a0d7f4331d9ec65
Size
437KB
MD5
d258d17817131a5cba5041813cda306d
SHA1
ae2baa457a2814a12f32bcaea16c6c8dd4460166
SHA256
a494a9258d9191755ed361bcd2ff47f0fba5ae1686d6ef824a0d7f4331d9ec65
SHA512
69ae2e100a53456a3881e10e723a4ce842a00ad9e601bd3964b1366f0a33d9fbe919a6733808b0413e1e72201226c04196755fe36906cec7da51e7985fbe4f8c
SSDEEP
6144:bas0ZLc/IJvCklIqA8mvHwgnHJp9OWqw7zsK0bencTpX4KtjY5Jt/lt0zwzOu6Wc:gBFJqk2q1g5ppemr0bAKoNfnQCSWpoSG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a494a9258d9191755ed361bcd2ff47f0fba5ae1686d6ef824a0d7f4331d9ec65 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ