AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
50ae7839463137f7fab104e21cda58572dbcf4fbd28c61038187752e2fed9512.dll
Resource
win7-20241010-en
Target
50ae7839463137f7fab104e21cda58572dbcf4fbd28c61038187752e2fed9512
Size
430KB
MD5
f7ec875f8ef9e1d72eb0095addc8e3b4
SHA1
38c8bb509c752f94cb938036aa21db72bd75f710
SHA256
50ae7839463137f7fab104e21cda58572dbcf4fbd28c61038187752e2fed9512
SHA512
02ad72e87bc66920ef7ce949a78dec784c2afdab48c4269887d49886cba3b097fe0a93330300569ce92d5dd96290dce33433e12039724e4045ec3a1adf45f5d1
SSDEEP
12288:q9j8pWxJdNxnSJwu416c9y0wiL7s1T37AVu68VnogfN7oSY:q9I+dGwu13UVb+n3fNW
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
50ae7839463137f7fab104e21cda58572dbcf4fbd28c61038187752e2fed9512 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AlphaBlend
DllInitialize
GradientFill
TransparentBlt
vSetDdrawflag
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE