InstallHook
InstallMyDll
UnInstallHook
Behavioral task
behavioral1
Sample
0d44de36f7052f7532bf5b886493f1bb.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
0d44de36f7052f7532bf5b886493f1bb.dll
Resource
win10v2004-20231215-en
Target
0d44de36f7052f7532bf5b886493f1bb
Size
152KB
MD5
0d44de36f7052f7532bf5b886493f1bb
SHA1
56d925ad3e144240cbcaa94b7cdaeba445d741e7
SHA256
dbb808dd47684b0c7dacdea9d372a153a81178042fcd32d56a2d0cef2f1609dc
SHA512
9f74ad491df4a816038a9041f6904e67b608cea1cea3fe8e5b5f10f9fbf97fcce2466caf31d44866b50c745d3bdfa9fd1d171125672396894ef82b30436e44b2
SSDEEP
3072:PMRL6ZIRVJ67TA8RZC57bS+9Q/dLCLsfLiH0B8xyz8mOIlEZ:U1x3PAOPYsLX0Byw8dIi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0d44de36f7052f7532bf5b886493f1bb |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InstallHook
InstallMyDll
UnInstallHook
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ