AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Behavioral task
behavioral1
Sample
163b13f58c8a563b8aa48ffcd54cefd7404246d0ed03734219521c52c8ba4ca5.dll
Resource
win7-20240704-en
Target
163b13f58c8a563b8aa48ffcd54cefd7404246d0ed03734219521c52c8ba4ca5
Size
437KB
MD5
4adac05956d726f6f1b747be33125b9e
SHA1
36bb2532a652df54db36e10cd5f5e3e05542184a
SHA256
163b13f58c8a563b8aa48ffcd54cefd7404246d0ed03734219521c52c8ba4ca5
SHA512
545bd3f4432e7bb05e04939271d91b409c47c097dfcc807884f826780ba0b07716549d37571ec365807c4e3970da6d70e73493f260eec93efa5d085119d1ca45
SSDEEP
6144:bas0ZLc/IJvCklIqA8mvHwgnHJp9OWqw7zsK0bencTpX4KtjY5Jt/lt0zwzOu6WE:gBFJqk2q1g5ppemr0bAKoNfnQCSWpoSe
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
163b13f58c8a563b8aa48ffcd54cefd7404246d0ed03734219521c52c8ba4ca5 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ