ADKAppsEntryPoint
ADKAppsGetOfferStatus
ADKAppsInitialize
ADKAppsInitializeOfferWindow
ADKAppsSetOfferAccepted
ADKAppsStartInstallDialog
ADKAppsStartOfferDialog
ADKAppsStopOfferDialog
Behavioral task
behavioral1
Sample
292864beabc3e307109a2df5bfa8a89e4f79d560f9b6147b9f7b0c73f0d18e7dN.dll
Resource
win7-20240903-en
Target
292864beabc3e307109a2df5bfa8a89e4f79d560f9b6147b9f7b0c73f0d18e7dN
Size
110KB
MD5
1868ce54a0d64f630dcd7d20d2654b10
SHA1
927b3ba16b4d07fb74bb4123b2e93e43f46fdd24
SHA256
292864beabc3e307109a2df5bfa8a89e4f79d560f9b6147b9f7b0c73f0d18e7d
SHA512
7b16d72b87a295cac547d719327f7349ed48d55cd353892758dccd3d5de740b71c82aa6581358e19cae7bd732f956d36b233984824438a4afef2b4483dc452af
SSDEEP
3072:o/ks+aDSlJWQFZj7ELw1lv4zjFTddZBfT52AiheSoutnzg:oqcYpjgLwYddLQFheSoSnE
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
292864beabc3e307109a2df5bfa8a89e4f79d560f9b6147b9f7b0c73f0d18e7dN |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ADKAppsEntryPoint
ADKAppsGetOfferStatus
ADKAppsInitialize
ADKAppsInitializeOfferWindow
ADKAppsSetOfferAccepted
ADKAppsStartInstallDialog
ADKAppsStartOfferDialog
ADKAppsStopOfferDialog
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE