Resource_Address
Resource_Length
Static task
static1
Behavioral task
behavioral1
Sample
1f05929d1a2bf878068796164d519853fdf9f25ce5c0a1a4515b9be27496a8ff.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
1f05929d1a2bf878068796164d519853fdf9f25ce5c0a1a4515b9be27496a8ff.dll
Resource
win10v2004-20240802-en
Target
1f05929d1a2bf878068796164d519853fdf9f25ce5c0a1a4515b9be27496a8ff
Size
1.9MB
MD5
13f937c1a1639e3920fcb59eb82ba9ba
SHA1
856edd193d91451e6bc4a3338f4eb6d22c1721e0
SHA256
1f05929d1a2bf878068796164d519853fdf9f25ce5c0a1a4515b9be27496a8ff
SHA512
9072d68de00a1a2a1d00589aaf22201d1578d31a11a0ddae8f622239ad3803c0043a9cb3899f746c6b0f548d0997fc2fa8523b16b3d278652bdc92607288313a
SSDEEP
49152:L8cWxeZMKdRUxS8MU3rRDFSFdCbzS41fxSOwtRM2KpeKV7Npy:Pld6xr7RJSF0zj1f1wnKRjy
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
Checks for missing Authenticode signature.
resource |
---|
1f05929d1a2bf878068796164d519853fdf9f25ce5c0a1a4515b9be27496a8ff |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Resource_Address
Resource_Length
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE