AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Behavioral task
behavioral1
Sample
dec240f90126c210d6af9e56804680bc0da18d4bf03a86d9ae7b5efc0885eba7.dll
Resource
win7-20240903-en
Target
dec240f90126c210d6af9e56804680bc0da18d4bf03a86d9ae7b5efc0885eba7
Size
430KB
MD5
78ff30bfdca508391bf8da77cb0a165c
SHA1
0d681d752023d7150435b9097080ab5e4d0ae547
SHA256
dec240f90126c210d6af9e56804680bc0da18d4bf03a86d9ae7b5efc0885eba7
SHA512
f0b6c486830d7e54e474397e03a9a8dedbbf5744cd4f3ee9cc38ad788000c247154e7378f15f02a0b68dc9fd8cb953981ee3db317c69a83e658c8d7c220ab23f
SSDEEP
12288:q9j8pWxJdNxnSJwu416c9y0wiL7s1T37AVu68VnogfN7oS/:q9I+dGwu13UVb+n3fNx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dec240f90126c210d6af9e56804680bc0da18d4bf03a86d9ae7b5efc0885eba7 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE