CBATTACH
CBDEBUGEVENT
CBDETACH
CBEXCEPTION
CBINITDEBUG
CBMENUENTRY
CBPAUSEDEBUG
CBRESUMEDEBUG
CBSTOPDEBUG
CBWINEVENT
pluginit
plugsetup
plugstop
Behavioral task
behavioral1
Sample
e9fc65dacd89a230b17d6ce0ccd9d69b29863944b00ef7269656b02817c2641b.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
e9fc65dacd89a230b17d6ce0ccd9d69b29863944b00ef7269656b02817c2641b.dll
Resource
win10v2004-20230915-en
Target
e9fc65dacd89a230b17d6ce0ccd9d69b29863944b00ef7269656b02817c2641b
Size
526KB
MD5
8b5f1cb4a21fa215376add85be0bdf0d
SHA1
3e7dad449fa995109015568d020e2e9a9f4ac627
SHA256
e9fc65dacd89a230b17d6ce0ccd9d69b29863944b00ef7269656b02817c2641b
SHA512
f9cdf24dd6d59635d1bf8d21a3874c9b3eeb4282e92c035d5d81e76fc65ab8678434610293ae65f1185474999098f05626b9035cf2854de924e52ae0ca5f6735
SSDEEP
12288:LhMTFkgsk+7PS98MIbMXTbkz/psiNQL+sMr1R6:UWqIIXncZOMpR6
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e9fc65dacd89a230b17d6ce0ccd9d69b29863944b00ef7269656b02817c2641b |
unpack001/out.upx |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CBATTACH
CBDEBUGEVENT
CBDETACH
CBEXCEPTION
CBINITDEBUG
CBMENUENTRY
CBPAUSEDEBUG
CBRESUMEDEBUG
CBSTOPDEBUG
CBWINEVENT
pluginit
plugsetup
plugstop
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ