CloseInput
DLLInfo
GetExitCode
GetProcess
ReadBinary
ReadText
ReleaseProcess
Remove
RunConsole
SetProcess
WriteBinary
WriteText
Behavioral task
behavioral1
Sample
TaskUsage.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
TaskUsage.dll
Resource
win10v2004-20230220-en
Target
TaskUsage.dll
Size
6KB
MD5
0a69766e5e30f2a23f41c7bbfc27eba8
SHA1
fe93895ffaf1ac414630ddbaded778b1e01f0a8f
SHA256
812f25442ffdbfc5f98d3947ca946c4f261979ac268de1b96ee4d1a72f5c0bd7
SHA512
37755332d97c72b13e41f722335df535fa79c242c2d66b727ec452ebb79ed84f76566e5150477ce054628c3c7e696fb06ac14b61092ca568d94b927785f34268
SSDEEP
96:0h1OlChM6zJbSyNouiCBtoMkadJFRKxHxyOAjY7RogmsynhP5:WklglSwouiMDJreHxyOAjZhx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
TaskUsage.dll |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
CloseInput
DLLInfo
GetExitCode
GetProcess
ReadBinary
ReadText
ReleaseProcess
Remove
RunConsole
SetProcess
WriteBinary
WriteText
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ