GetCommand
GetCommandCount
GetFormatVersion
GetPluginDescription
��ģ���Ҷ�Ŀ��
Behavioral task
behavioral1
Sample
ee7d87ee9a78124b1e7d079249ab777071ed00678312cf0cea058173a642cbab.dll
Resource
win7-20240903-en
Target
ee7d87ee9a78124b1e7d079249ab777071ed00678312cf0cea058173a642cbab
Size
818KB
MD5
8b60dc1491a1e2c8d393dd126bcd3e81
SHA1
ae8e9cc16d39329be0c2dffc98748e3a63f6af86
SHA256
ee7d87ee9a78124b1e7d079249ab777071ed00678312cf0cea058173a642cbab
SHA512
ba6956b75049836aa642d99faa3779784635427b243dba3208f5c639d3600a90cb680bb48923275b6b86d4cb5a561d10e210cdca3c3b80d1af5167add30516b8
SSDEEP
24576:EZV9T1TMvr3C5mBQOjcgcdYPhRGJG1SUSAd:E3d1AvLC5mOORcdmRn3SAd
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ee7d87ee9a78124b1e7d079249ab777071ed00678312cf0cea058173a642cbab |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetCommand
GetCommandCount
GetFormatVersion
GetPluginDescription
��ģ���Ҷ�Ŀ��
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE