Run
SendData
SendFields
SendGlobalData
Behavioral task
behavioral1
Sample
8a796af675f7b7028257dff1c97f1010198c5802ebcda08fabea53d754e30e2d.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
8a796af675f7b7028257dff1c97f1010198c5802ebcda08fabea53d754e30e2d.dll
Resource
win10v2004-20230220-en
Target
e1bfeb584f8839e62c45fc88821c4c6e.bin
Size
1.7MB
MD5
2bb75b89297e4c3e79574f54f484d177
SHA1
1b9bae81f03f2fb2d07c2a0943747abab9d4d8e3
SHA256
accf78abf68c1eb4a37ecd87009caf6ce821b6e8cb700e95152837c6eb535cab
SHA512
5a0c244c432805e60505c920c87e69298dc3f7516539f35c8433608b9aa478e2a9f6e8921b33722b301ba5ae80d0734a51414793a84ff9ba370661cbbcc77e72
SSDEEP
49152:s4p6r3nHNPKeh/vVCd9Tufgesa5AyBtww:s4p6Np3gd0fh5ZBtF
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/8a796af675f7b7028257dff1c97f1010198c5802ebcda08fabea53d754e30e2d.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/8a796af675f7b7028257dff1c97f1010198c5802ebcda08fabea53d754e30e2d.dll | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/8a796af675f7b7028257dff1c97f1010198c5802ebcda08fabea53d754e30e2d.dll |
unpack002/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Run
SendData
SendFields
SendGlobalData
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ