Extended Key Usages
ExtKeyUsageCodeSigning
Behavioral task
behavioral1
Sample
Предписание.dll
Resource
win7-20240903-en
Target
4063740ed87855f4046b3da4a859908f_JaffaCakes118
Size
141KB
MD5
4063740ed87855f4046b3da4a859908f
SHA1
8588dca7d682f00dc2fc81befb22cc64473ad6e6
SHA256
6df90a8ce9ea57b0be42e916e553ad3cfd8143c23e07d0849ae5ca36da86d615
SHA512
cdd191a36b9137b526af276cee23892fa8c4348d01734fe27b7f4f36f20e67daba0d21bd4ef0e61c65323a6a393344a72d14cf5c8dc9a0215534c2b94471997b
SSDEEP
3072:hH0Tuq3RmBpr7uHtLYxahNlYlvEbyQ74L1KIdZ2paHl+9GFq:F0TP3MBV7uNiYcBUqj0mq
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/Предписание.cpl | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/Предписание.cpl | upx |
ExtKeyUsageCodeSigning
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CPlApplet
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE