_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
2fbfa1660bc8d14f0f01770edaec1f17e8403e27f3f56069d2459d22be2c3977N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
2fbfa1660bc8d14f0f01770edaec1f17e8403e27f3f56069d2459d22be2c3977N.dll
Resource
win10v2004-20240802-en
Target
2fbfa1660bc8d14f0f01770edaec1f17e8403e27f3f56069d2459d22be2c3977N
Size
34KB
MD5
f9f07488e2b587c1f6225dd921a97d10
SHA1
fd52043e6fcd06964b16509a176a9dc6a0c93ff3
SHA256
2fbfa1660bc8d14f0f01770edaec1f17e8403e27f3f56069d2459d22be2c3977
SHA512
aa651134fcfcac01e7d295325f4fd1b5fcd3ccd7bf36c408d262c2341d68cade49b511331ffec68113185d8896adcbcff0d28ce96dd43acdaa038054b28b8fe3
SSDEEP
768:EA3mlFyU22rGvAcCsV+mQ6MEKbSoKDg4iNWJXnbcuyD7U8fK:M/AUGvA6nQ6MEKKDPjnouy88fK
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2fbfa1660bc8d14f0f01770edaec1f17e8403e27f3f56069d2459d22be2c3977N |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE