AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
b7b27bb86a167784e1b3b63ecc9402cfc6861bb913f18125b65bb0d9e0d5cab4.dll
Resource
win7-20240903-en
Target
b7b27bb86a167784e1b3b63ecc9402cfc6861bb913f18125b65bb0d9e0d5cab4
Size
437KB
MD5
9d080dee1132246ce6c974eaa14f3adf
SHA1
4ddfb415820fdf1725e9ab7d46965ec9c80d7345
SHA256
b7b27bb86a167784e1b3b63ecc9402cfc6861bb913f18125b65bb0d9e0d5cab4
SHA512
be2de09862e9a4f83bb746fd616e20d22a2004fecc56b81e5e9fd01d32c4ea777c55695f82633ac532d9a43408813c8c9276bf6135c73bee55864ae47bc874a0
SSDEEP
6144:bas0ZLc/IJvCklIqA8mvHwgnHJp9OWqw7zsK0bencTpX4KtjY5Jt/lt0zwzOu6Wi:gBFJqk2q1g5ppemr0bAKoNfnQCSWpoS4
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7b27bb86a167784e1b3b63ecc9402cfc6861bb913f18125b65bb0d9e0d5cab4 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ