AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Behavioral task
behavioral1
Sample
931ecf4807cfb3a6dbe54e98fcc4af391560dcd9c675b99f529b56e8f0b4618f.dll
Resource
win7-20240903-en
Target
931ecf4807cfb3a6dbe54e98fcc4af391560dcd9c675b99f529b56e8f0b4618f
Size
437KB
MD5
7157eed42ed967c58be0f8f575e184f2
SHA1
c87239516b0b527448d95b61b568f893d7b0e28a
SHA256
931ecf4807cfb3a6dbe54e98fcc4af391560dcd9c675b99f529b56e8f0b4618f
SHA512
4792619f7ba8b889ce65b4de60cffc9181a0e303c379caa9f5dddeb83f25148e330c8c4a6706c5cb371d1857d41da83b4f241c721f3fd9d76fbe290c288d9acb
SSDEEP
6144:bas0ZLc/IJvCklIqA8mvHwgnHJp9OWqw7zsK0bencTpX4KtjY5Jt/lt0zwzOu6WC:gBFJqk2q1g5ppemr0bAKoNfnQCSWpoSY
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
931ecf4807cfb3a6dbe54e98fcc4af391560dcd9c675b99f529b56e8f0b4618f |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ