DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
Behavioral task
behavioral1
Sample
ff721c81f01a511abc8d3568de03079511597575d5ef50c0033ca335dd6a7317.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ff721c81f01a511abc8d3568de03079511597575d5ef50c0033ca335dd6a7317.dll
Resource
win10v2004-20220812-en
Target
ff721c81f01a511abc8d3568de03079511597575d5ef50c0033ca335dd6a7317
Size
21KB
MD5
6ef8e6ce6466cc5d0bdf47d933884e02
SHA1
961d7b7a05adb0d456c7e6d6daf29b269b539e48
SHA256
ff721c81f01a511abc8d3568de03079511597575d5ef50c0033ca335dd6a7317
SHA512
db8aaa069b331756f2876b3afa0b44de4092cd8bd763602d5995b1ce9982c1b9703cd485a09d1dd6aa82a2d34a92c9ed28d147a5f073ddf31f693776a97992b3
SSDEEP
384:Y1uVMOXixV+f8TWt21QqZ3X1hns7NvrsTfaEr097C1wVb0cPCgYF:7Xix+8TWt219YhIYACV3q3
resource | yara_rule |
---|---|
static1/unpack001/out.upx | modiloader_stage2 |
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
JmpHookOff
JmpHookOn
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ