AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Behavioral task
behavioral1
Sample
e26ddc18601393757e66e41ee2e373aa7860aac1b9850fbd533d65fecb248b55.dll
Resource
win7-20240903-en
Target
e26ddc18601393757e66e41ee2e373aa7860aac1b9850fbd533d65fecb248b55
Size
432KB
MD5
3ccf87df3cc56e860885b15844288c75
SHA1
deb51d3643eb639e481f4273c94be8d6ff929741
SHA256
e26ddc18601393757e66e41ee2e373aa7860aac1b9850fbd533d65fecb248b55
SHA512
876479c91f785e60aabe436d14cc416713f52943eb152d62ab380a753709b6cc146689388f8a101ac8b10a8da7fde77e63d8a4cda10fa8c5b55fdcf0dfcfcaed
SSDEEP
12288:YmWwSnD5NkE6UcTs6QRJYUFfc7Hpd6t9HCShys6:YmWpFN5zcTs6QDYV7Hp0t9iSs
resource | yara_rule |
---|---|
static1/unpack001/out.upx | family_blackmoon |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e26ddc18601393757e66e41ee2e373aa7860aac1b9850fbd533d65fecb248b55 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ