RunDllHostCallBack
_��ť����ʯ_������
Behavioral task
behavioral1
Sample
0bfab79a5f4fb7a7c2ec7db5982dea40N.dll
Resource
win7-20240704-en
Target
0bfab79a5f4fb7a7c2ec7db5982dea40N.exe
Size
672KB
MD5
0bfab79a5f4fb7a7c2ec7db5982dea40
SHA1
c2d0f0291e40e5c0c528aa03ab2c11da8dcdfa1f
SHA256
a3348cbe98ffcc93cf45200745f539154138d26869e93554d547a8c6fb47f512
SHA512
db05114d865d8bfb3550b86b214931b6314ce362e2af0fa04d692142543df14d3e1dd9745cb9e55aa61e8fa82241e09f1b15969c0e924e818260266a2035064f
SSDEEP
12288:eTjV1wuxZ5SYaDD7UIh2+KhAko0LzAv41LHeb2pYONoXOT7CClsYDYiyoZi1w4Su:eT7zbS5Uw21BtLzz1SAdNdfhCJwrY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0bfab79a5f4fb7a7c2ec7db5982dea40N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RunDllHostCallBack
_��ť����ʯ_������
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE