GenericLogImpl
��������
����_ȡ�Խ���ID
ǿ��ɾ���ļ�
Behavioral task
behavioral1
Sample
b7bb08c4f34a419f7d23533222b592b9a5fd91da413df2dfc721eef9e43c988b.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
b7bb08c4f34a419f7d23533222b592b9a5fd91da413df2dfc721eef9e43c988b.dll
Resource
win10v2004-20230915-en
Target
b7bb08c4f34a419f7d23533222b592b9a5fd91da413df2dfc721eef9e43c988b
Size
6.4MB
MD5
2365810fefb6a1f282ae5a9dff15766b
SHA1
60cd92fe6164e4e29fd1be7cf29558c9559804ba
SHA256
b7bb08c4f34a419f7d23533222b592b9a5fd91da413df2dfc721eef9e43c988b
SHA512
e2d4442610780f83df1509540c06250b45507af8f0900d2f2db8354c9690d4245ee9a6059c4a4570e3472eab8678bb10b31875206f2645adec899922b6e078f8
SSDEEP
196608:ciqJX17iArpvf0LVihZcL5H1xggO6ZRW1KvofJxQjV:c8A16gwYVcRW6sUj
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7bb08c4f34a419f7d23533222b592b9a5fd91da413df2dfc721eef9e43c988b |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GenericLogImpl
��������
����_ȡ�Խ���ID
ǿ��ɾ���ļ�
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ