bcmfrsvbm
txe
yffdyzfme
Behavioral task
behavioral1
Sample
35abcbbe2ea3243e5f3c68e2ffd5d877494731d7b1d1825b0d31ebc157263372.dll
Resource
win7-20240704-en
Target
35abcbbe2ea3243e5f3c68e2ffd5d877494731d7b1d1825b0d31ebc157263372
Size
296KB
MD5
142a80d85b450488c4f9f36358870428
SHA1
7bc7bec3a2d220f62fb4ee7f0e34196a5b4d32c0
SHA256
35abcbbe2ea3243e5f3c68e2ffd5d877494731d7b1d1825b0d31ebc157263372
SHA512
d4d778f299b35624653c4c1b7543c4024d10303323bbebc860ef2b0294c10e9491838cf880934963c4cca8c79482b7f57a51638f5b0723eb12fa8d5a86fe0f8a
SSDEEP
6144:ZX4POTpi/10hp+6Ks4OGAI3cKNYywFCpm+CL5oQ6IZjaWAF75oS0:ZXy1/1zCW3cCwfoQWWAF75oS0
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
35abcbbe2ea3243e5f3c68e2ffd5d877494731d7b1d1825b0d31ebc157263372 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
bcmfrsvbm
txe
yffdyzfme
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE