DoMyJob
GetPTPluginName
LoadDll
StartPTPlugin
Static task
static1
Behavioral task
behavioral1
Sample
Max PE Info By Veyskarami.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
Max PE Info By Veyskarami.dll
Resource
win10v2004-20241007-en
Target
45044ccb4a351c531e49e859bdba1162_JaffaCakes118
Size
63KB
MD5
45044ccb4a351c531e49e859bdba1162
SHA1
81484ace45a5646e8a4198abf881125c98dea26d
SHA256
62082e86a68d18a1f1076d88beabd6ac21e1df6d9bfe116183d5d99718ce7f8e
SHA512
b5bb395d649d1b058fcd25a04493f6420dee5ba299f534ffa137af2fc708efe9ddefbc6ae5e840436f62a2d9d20a7344d5fd9f17ac0becf89837c0bd086eaba7
SSDEEP
1536:WlxJ2bk8cEhhKMrQQU7oEiWHKGI4xo7BfznWJc1PME8k6YMI:keLcEhIQU7oURoFbWJcaExn
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/Max PE Info By Veyskarami.dll | acprotect |
Checks for missing Authenticode signature.
resource |
---|
unpack001/Max PE Info By Veyskarami.dll |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI
DoMyJob
GetPTPluginName
LoadDll
StartPTPlugin
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE