DoMyJob
LoadDll
Overview
overview
7Static
static
7HA.PEiD.0.95/PEiD.exe
windows7-x64
7HA.PEiD.0.95/PEiD.exe
windows10-2004-x64
7HA.PEiD.0....EP.dll
windows7-x64
1HA.PEiD.0....EP.dll
windows10-2004-x64
1HA.PEiD.0....EC.dll
windows7-x64
3HA.PEiD.0....EC.dll
windows10-2004-x64
3HA.PEiD.0....Rx.dll
windows7-x64
1HA.PEiD.0....Rx.dll
windows10-2004-x64
1HA.PEiD.0....al.dll
windows7-x64
1HA.PEiD.0....al.dll
windows10-2004-x64
1HA.PEiD.0....al.htm
windows7-x64
1HA.PEiD.0....al.htm
windows10-2004-x64
1HA.PEiD.0....le.bat
windows7-x64
1HA.PEiD.0....le.bat
windows10-2004-x64
1HA.PEiD.0....in.vbs
windows7-x64
1HA.PEiD.0....in.vbs
windows10-2004-x64
1更多系�...�.html
windows7-x64
1更多系�...�.html
windows10-2004-x64
1Behavioral task
behavioral1
Sample
HA.PEiD.0.95/PEiD.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
HA.PEiD.0.95/PEiD.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
HA.PEiD.0.95/plugins/GenOEP.dll
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
HA.PEiD.0.95/plugins/GenOEP.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
HA.PEiD.0.95/plugins/ImpREC.dll
Resource
win7-20231025-en
Behavioral task
behavioral6
Sample
HA.PEiD.0.95/plugins/ImpREC.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral7
Sample
HA.PEiD.0.95/plugins/ZDRx.dll
Resource
win7-20231020-en
Behavioral task
behavioral8
Sample
HA.PEiD.0.95/plugins/ZDRx.dll
Resource
win10v2004-20231023-en
Behavioral task
behavioral9
Sample
HA.PEiD.0.95/plugins/kanal.dll
Resource
win7-20231020-en
Behavioral task
behavioral10
Sample
HA.PEiD.0.95/plugins/kanal.dll
Resource
win10v2004-20231020-en
Behavioral task
behavioral11
Sample
HA.PEiD.0.95/plugins/kanal.htm
Resource
win7-20231023-en
Behavioral task
behavioral12
Sample
HA.PEiD.0.95/plugins/kanal.htm
Resource
win10v2004-20231025-en
Behavioral task
behavioral13
Sample
HA.PEiD.0.95/pluginsdk/MASM/compile.bat
Resource
win7-20231023-en
Behavioral task
behavioral14
Sample
HA.PEiD.0.95/pluginsdk/MASM/compile.bat
Resource
win10v2004-20231023-en
Behavioral task
behavioral15
Sample
HA.PEiD.0.95/pluginsdk/PowerBASIC/PEiD_Plugin.vbs
Resource
win7-20231023-en
Behavioral task
behavioral16
Sample
HA.PEiD.0.95/pluginsdk/PowerBASIC/PEiD_Plugin.vbs
Resource
win10v2004-20231023-en
Behavioral task
behavioral17
Sample
更多系统软件下载.html
Resource
win7-20231020-en
Behavioral task
behavioral18
Sample
更多系统软件下载.html
Resource
win10v2004-20231020-en
Target
394cf03d8d4f9f18d48a084c01821342e14cfdfb580115980cb89765d9fac7d1
Size
402KB
MD5
0ea39b5fc75480374b80b130068bb8c7
SHA1
494891f71ae7381a7e5652046e290188cee60dd7
SHA256
394cf03d8d4f9f18d48a084c01821342e14cfdfb580115980cb89765d9fac7d1
SHA512
0eefbf04a9788f48a36870912e9b3a43f83517893a81edcb70575a1d665c979430a101d8b8e7f34525531b9562f9817eadbef69bcf588c420eb60935c3903c77
SSDEEP
6144:gCI77uakxx5b/wAhUu6OTwyLFk91xZcEW7R8YVxOZG9wkJpafL0buzAsnbi7F:H6iaIPEG6HyLFk9PZpW7RBHTYLhsr
Detects file using ACProtect software.
resource | yara_rule |
---|---|
static1/unpack001/HA.PEiD.0.95/plugins/ImpREC.dll | acprotect |
resource | yara_rule |
---|---|
static1/unpack001/HA.PEiD.0.95/PEiD.exe | upx |
Checks for missing Authenticode signature.
resource |
---|
unpack001/HA.PEiD.0.95/PEiD.exe |
unpack002/out.upx |
unpack001/HA.PEiD.0.95/plugins/GenOEP.dll |
unpack001/HA.PEiD.0.95/plugins/ImpREC.dll |
unpack001/HA.PEiD.0.95/plugins/ZDRx.dll |
unpack001/HA.PEiD.0.95/plugins/kanal.dll |
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DoMyJob
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
RebuildImport
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DoMyJob
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
DoMyJob
LoadDll
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ