_LOADLIBRARY_DUMMY
_RunAs@16
Behavioral task
behavioral1
Sample
6351cee3dd16b7892ed41d91ddf0cb276d108aadfb4c4d59a0e4f7af0d13460cN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
6351cee3dd16b7892ed41d91ddf0cb276d108aadfb4c4d59a0e4f7af0d13460cN.dll
Resource
win10v2004-20240802-en
Target
6351cee3dd16b7892ed41d91ddf0cb276d108aadfb4c4d59a0e4f7af0d13460cN
Size
34KB
MD5
1039e79e3da3da8303a1bfc8872fb980
SHA1
9e780bec3a18ed6d8e5dfe9556d2a5caf4f025bd
SHA256
6351cee3dd16b7892ed41d91ddf0cb276d108aadfb4c4d59a0e4f7af0d13460c
SHA512
1da1c9620c78a396864d3afbd194cd3cbe5d808b33f6749a5d0893e1a88f29d63839bbeacc819f493e9c7bccabe478a3e49b87c71aa07648a2f13833fcb539e3
SSDEEP
768:bfg2cklvcKtsaWdC0jUIqirU2EWRGog8XEw00hnbcuyD7UT6z:bWkZcKtQ4WWiI2ZGopXEWhnouy8T6z
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6351cee3dd16b7892ed41d91ddf0cb276d108aadfb4c4d59a0e4f7af0d13460cN |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
_LOADLIBRARY_DUMMY
_RunAs@16
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE