?InitXControls@xControls@@YAHPAUHINSTANCE__@@@Z
FsDeleteFile
FsExecuteFile
FsExtractCustomIcon
FsFindClose
FsFindFirst
FsFindNext
FsGetDefRootName
FsGetFile
FsInit
FsSetDefaultParams
FsStatusInfo
Behavioral task
behavioral1
Sample
1436aa32e9140f52432d2f8961e71b6f.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
1436aa32e9140f52432d2f8961e71b6f.dll
Resource
win10v2004-20231222-en
Target
1436aa32e9140f52432d2f8961e71b6f
Size
610KB
MD5
1436aa32e9140f52432d2f8961e71b6f
SHA1
62acf50c9217d3f483482780540ff8c987e90164
SHA256
dd7b20f68432349cd528fe9419a8062ff2f2908015eb934002e4d4189ce71058
SHA512
7e26446db7ac33de728fa106e20b4058726109d05bcfbe1ba93f787edff68817262c5dd8adc6f40a2314afc2ae7c3de45b0975e8ea2b0dfa3aba9e38182c278c
SSDEEP
12288:Ta1WWvivbDbJBhXGhrKkUyXIde/nDgDV2f3pk9LSpC6tQ2tv+aL:EWWvizpXo/T4c7Wak9LSpnq2caL
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1436aa32e9140f52432d2f8961e71b6f |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?InitXControls@xControls@@YAHPAUHINSTANCE__@@@Z
FsDeleteFile
FsExecuteFile
FsExtractCustomIcon
FsFindClose
FsFindFirst
FsFindNext
FsGetDefRootName
FsGetFile
FsInit
FsSetDefaultParams
FsStatusInfo
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ