@@Ibem@Finalize
@@Ibem@Initialize
DisableWDT
EnableWDT
GetDioInput
GetWDTInfo
InstallDriver
IsDioAvailable
RemoveDriver
SetDioInputMask
SetDioOutput
SetDioOutputMask
___CPPdebugHook
Behavioral task
behavioral1
Sample
415cbfea596ea79251adfa410152ba757fd32f3dbbdda8dab3ddbbbe050caf22.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
415cbfea596ea79251adfa410152ba757fd32f3dbbdda8dab3ddbbbe050caf22.dll
Resource
win10v2004-20230220-en
Target
415cbfea596ea79251adfa410152ba757fd32f3dbbdda8dab3ddbbbe050caf22
Size
45KB
MD5
4dbdae53454b64d2ed9eca646e8493c6
SHA1
8a170fd13d0c82ff8c08c9eaa184c896ae6f31c8
SHA256
415cbfea596ea79251adfa410152ba757fd32f3dbbdda8dab3ddbbbe050caf22
SHA512
85b8cbd63ea225da66e5b8ba35b7c9e0ddedb91352d8d15e223291c6099a0e6eabe5a4bc77419bba149a25b267ffc9c8fa8df1f7d24fd120dfcb8e4a8328e374
SSDEEP
768:3uonYO2x+LCWjsI7wyL9STCRHgSBYc2hB/XKZDyrz0dTymdmbb:3XYO2ICy/zf5g20x6gdmdA
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
415cbfea596ea79251adfa410152ba757fd32f3dbbdda8dab3ddbbbe050caf22 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
@@Ibem@Finalize
@@Ibem@Initialize
DisableWDT
EnableWDT
GetDioInput
GetWDTInfo
InstallDriver
IsDioAvailable
RemoveDriver
SetDioInputMask
SetDioOutput
SetDioOutputMask
___CPPdebugHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ