ZpArchive
ZpGetOptions
ZpInit
ZpSetOptions
ZpVersion
Behavioral task
behavioral1
Sample
b65429c98b5f130d00356d2135b65c90N.dll
Resource
win7-20240903-en
Target
b65429c98b5f130d00356d2135b65c90N.exe
Size
678KB
MD5
b65429c98b5f130d00356d2135b65c90
SHA1
f36b53e56339aa6f3315be9a684647c639130c88
SHA256
5c9a8f24f1ccec1e545870b9990a9767a13124b57374c31349cdd1ba92a3a915
SHA512
9e7e2d7e974e49ddb007d8ebf4d1142e96edb471889bffc15dff7adc6a8e5550803e938d222de7a11f6e3a82d0e9ff0506735aba06f20e110f014588789e0c7b
SSDEEP
1536:i3C8wUcw1dwm8qlwn4iEv72oIY6bGkPwTufpXeTVZR3AWgCuNjC2WL2Ro/:o0UXEfhEYbzPCTVZR3AWijGLMo/
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b65429c98b5f130d00356d2135b65c90N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ZpArchive
ZpGetOptions
ZpInit
ZpSetOptions
ZpVersion
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE