AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
4671eb6846247753f89feeec33512129313c942a0fb44d0b03d18b32d19869e2N.dll
Resource
win7-20240704-en
Target
4671eb6846247753f89feeec33512129313c942a0fb44d0b03d18b32d19869e2N.exe
Size
437KB
MD5
1c9ea3c5b5f04beadca7c29f84eb1930
SHA1
0f6f2ff18d13894f42bb4fac43a07c8e4595a99f
SHA256
4671eb6846247753f89feeec33512129313c942a0fb44d0b03d18b32d19869e2
SHA512
7acf4c620535490a095c73d19c5459754b3e2c817e265e0ede1fba3db124972bea9e3d0470aeed431352b027d7310c936196cc50ccc9f41cd8d774028f2b4228
SSDEEP
6144:bas0ZLc/IJvCklIqA8mvHwgnHJp9OWqw7zsK0bencTpX4KtjY5Jt/lt0zwzOu6Wc:gBFJqk2q1g5ppemr0bAKoNfnQCSWpoSG
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4671eb6846247753f89feeec33512129313c942a0fb44d0b03d18b32d19869e2N.exe |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ