jiekou
vSetDdrawflag
���ٶ���ҳ
��ֹ�ظ�����
Behavioral task
behavioral1
Sample
bfa6cdaeb3144095869d6776959437218c41016ef15fdaa76216c6ef75fe47d8N.dll
Resource
win7-20240708-en
Target
bfa6cdaeb3144095869d6776959437218c41016ef15fdaa76216c6ef75fe47d8N
Size
489KB
MD5
55fc07dd223c16ffd6fec7d383b22e30
SHA1
5bdc1ace449f5a9287a499de3dcb37a7c588b00b
SHA256
bfa6cdaeb3144095869d6776959437218c41016ef15fdaa76216c6ef75fe47d8
SHA512
7302f7d34c92e299d19cbbadd5c4db1099bfaac29fdcbde1ce7ebe7e2ac25a143dcea4bc71e09e068ddab1eefaa243a8ca78e7b1df285b00c9e3e18f5331e903
SSDEEP
12288:G59Vr1ECnsF2SSGvqm+xAm111HBZ1o5uc3UYv09t1oSa:GQCsFj3vqY211X1o5uOUYvKtS
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bfa6cdaeb3144095869d6776959437218c41016ef15fdaa76216c6ef75fe47d8N |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
jiekou
vSetDdrawflag
���ٶ���ҳ
��ֹ�ظ�����
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE